added spring security to handle authentication