finish security, make thymeleaf page, jpa transactional issue

finish security config
make user signup page
resolve jpa transactional issue