switch to spring-security-controller-auth library