Polishing spring security config