update spring security to use , to separate roles during pre-auth
update minimal config to use proxy preauth