create authorities in loader bean