https enabled application; sql for user_roles ; session management
config in spring security