Fixed login logica with Spring security