spring security seems to be configured