backbone + Spring Security