Playing with token based authentication for spring security