spring security init, login/logout, user and roles