wicket + spring-security