implemented my own Spring authentication provider in order to be able to
validate not only user name but also user password