added spring security fields to user object