Spring security group based user authorities.