some progress on Spring Securicty impl + User entity, DAO TO service