added success and error callback to login method
removed constructor to be able to directly persist it
initial work on security framework integration
changed default to allow, could be that we don't have any RequestPermissionResolver.
query uses userId
Merge branch 'feature/integrate_security_todolist' into develop