token authentication works; many changes in config.security package; whoami-testing metod added; FetchType.EAGER on User roles field
authorities added to AuthTokenProcesFilter, in securityconfig admin page secured
TokenService was redudant - deleted
passwords stored in db are hashed MD5 now, restful token auth works approperly: base64(username.md5(password))