Spring MVC application using spring security