adding spring security (missing 3scale authentication provider)