Spring Boot Web MVC with Spring Security