putting together spring security 3.1