adding spring security and basic sign-in mechanism

sign-in mechanism is missing user validation, need to add this both on
the server- and client-side