freemarker, spring-security