added UserDetailsService to provide DB auth