Spring sec. again without secure channel