changing anonymous to ROLE_ANONYMOUS according to spring security default roles