First pass at spring security setup