Questions for spring-security