Use current user from spring security in controller