finished token manipulation, login/logout, MVC @Secured annotations not working properly yet