Spring Security Token-based REST Endpoints