got solid auth with json and moved db credentials into spring injection