Making ajax request work with Spring Security