using "spring security" authentication at DuckDuckGo