Spring Security base configuration (without database)