base security config
standard spring security