spring security acl + angularjs