building and securing a web application with spring boot