resource provider: Spring security filter