fix hsqldb populate and initial version of spring security untested