thymeleaf Spring Security and Thymeleaf