working on getting spring security to work