Added oauth2.

* Using Sping Security
* Users defined in context configuration and token stored in memory.
Should be enough to support dev in the interim.