spring security taglibs added, users page restricted for admin only,
unnecessary login logout sorted out