BackboneJS + Spring REST & security