[spring security configuration]  - add basic configuration for spring security, add simple form for sign in, user stored at "in memory auth", set session timeout for 10 minutes