Questions - spring-security-oauth2