working on the spring authentication