Secured Rest-Service with Spring Security and Http-Basic-Auth; Android-App now sends Basic-Auth Header with each request