Applying Spring Security on RESTful web services