Another way to configure auth settings.
Use Spring Security's @AuthenticationPrincipal.
Add validation error messages.