simple refactor, fix: Spring Security