https://www.machinet.net/tutorial-eng/how-to-use-preauthorize-in-spring-security