Migrate to spring security java config