Spring Security, UserController, AuthenticationService