added spring security

hardcoded password