basic spring security added with 1 user and pw