Using Spring Security for basic authorization