Spring Security working(with openID), but hardcoded roles