set up spring security, portal controller webapp