add spring security support