try oauth (copy from spring-security-oauth/samples/oauth/tonr)