spring security configured but User-Authorities mapping needs to be
changed to lazy fetching