added spring security feature for roles - ROLE_ADMIN for Users page &
log in / logout buttons - isAuthenticated()