implemented UserRepository, added spring security but doesn't working