Introduce Spring Security 3.1
This is the first step, I basically disable security right now
HTTP basic authentication is simple
But for a web application, we probably need to use form authentication instead
This will be added later