Added in Spring Security for all URLs, with hardcoded user details
Method level security, and a new debug handler for getting who you are logged in as, only available if you are authenticated