init spring security - just the beginning