Modify User class to implement Serializable, as Spring Security wants it
this way so it can persists User info