added spring security and set up some roles