https://spring.io/guides/topicals/spring-security-architecture/