fixed spring security authentication