pure bean spring security config 1