added spring security and added roles plus a default user to the bootstrap