spring security and story domain