Added authorization based on spring security