spring security, css file + fixes