added login with spring security and refactored domain/persistence with
password