spring-security, user management (added previously omitted files)