Spring security: native authentication