Bug fix: (1) User roles mismatch between XML config and DatabaseUserDetailsService; (2) rememberMeService key mismatch