Work in progress: spring security