Those are intentionally misspelled as a small test of the ability to use nonstandard field names - see http://grails-plugins.github.io/grails-spring-security-core/docs/manual/guide/domainClasses.html#personClass