Securing Spring REST service using OAuth2