Spring_Security source code analysis