added Spring Security with login page and authentication permissions