stringboot事先登录拦截后session取不到值

package cn.bdqn.xd.config;

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;

@Configuration
public class WebAppConfig extends WebMvcConfigurerAdapter {





    // 注册拦截器
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        registry.addInterceptor(new LoginInterceptor())
                .addPathPatterns("/**")
                .excludePathPatterns("/togoLogin.do");
    }
}

package cn.bdqn.xd.config;

import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

/**
 * @author 晓敏
 * @create 2020-03-16 16:26
 */
@Configuration
class LoginInterceptor extends HandlerInterceptorAdapter {

    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        Object username = request.getSession().getAttribute("user");

        if (username==null){
            response.setContentType("text/html;charset=utf-8");
            response.getWriter().print("<script>alert('请先登录！');location.href='togoLogin.do';</script>");
            return false;
        }

        return true;
    }





}

@Controller
public class XdUserController {


    @Autowired
    private UserLoginService us;

    @RequestMapping("togoLogin.do")
    public String togoLogin(){
        return "login";
    }


    /**
     * 登录
     */
    @RequestMapping("Login.do")
    public String success(ModelAndView mav, String username, String Userpassword,HttpServletResponse resp, HttpServletRequest request,HttpSession session)throws IOException {
        //System.out.println(Userpassword);
        String pass = MD5Util.md5(Userpassword);
        resp.setContentType("text/html;charset=utf-8");
        User user = us.userLoginService(username,pass);
        System.out.println(user);
            if(user!=null){
                session.setAttribute("user",username);
                if (user.getUSer_role_id()==1){
                    /*session.setAttribute("user",user);*/
                    return "redirect:gjb_index.do";
                }else if (user.getUSer_role_id()==2){
                    /*mav.addObject("user",user);
                    mav.setViewName("redirect:Ybk_togoTeacher_index.do");*/
                    /*session.setAttribute("user",user);*/
                    System.out.println(user);
                    return "Ybk_Teacher_index";
                }else if (user.getUSer_role_id()==3) {
                    /*session.setAttribute("user", user);*/
                    return "three";
                }else if (user.getUSer_role_id()==4) {
                   /* session.setAttribute("user", user);*/
                    return "four";
                }else if (user.getUSer_role_id()==5) {
                  /*  session.setAttribute("user", user);*/
                    return "five";
                }
                else {
                    return "login";
                }
            }else{
                resp.getWriter().print("<script>alert('账号或密码错误，请重新输入');</script>");
                return "login";
            }
    }