spring secur, user data from db