http://flyeric.top/archives/spring-security-jwt-frontend-separation-architecture