Spring Security Java Questions