added spring security for login based authorization

- migrations auto include default admin user