Spring Security with multiple authentication providers