Well as the name suggests FlowSecurityInterceptor it isn't a filter and as such should be configured differently. Add a ConditionalFlowExecutionListenerLoader to your flow configuration
Code:
<bean id="executionListenerLoader" class="org.springframework.webflow.execution.factory.ConditionalFlowExecutionListenerLoader">
<property name="listeners">
<map>
<entry key-ref="flowSecurityInterceptor" value="*"/>
</map>
</property>
</bean>
This will attach the listener to all request to execute a flow,event,transition. The next thing to do is to register this FlowExecutionListenerLoader with your FlowExecutor.
Code:
<bean id="flowExecutor" class="org.springframework.webflow.executor.FlowExecutorImpl">
<constructor-arg ref="flowRegistry"/>
<constructor-arg>
<bean class="org.springframework.webflow.engine.impl.FlowExecutionImplFactory">
<property name="executionAttributesMap" ref="executionAttributes"/>
<property name="executionListenerLoader" ref="executionListenerLoader"/>
</bean>
</constructor-arg>
<constructor-arg ref="repository"/>
</bean>
configure the remainder as usual.
If you have anymore questions feel free to ask, I'm currently writing a demo/presentation regarding the SWF-93 JIRA issue. I'll check if I', allowed to post the presenation/demo somewhere.