add basic spring security support