spring security password now in db
no encryption yet