added spring-security-core plugin and associated domain classes.
fixed some wierdness on the README file.
create an admin and test user and the associated roles.