adding spring security login with password hash