Move from custom login to Spring Security

At the moment there is some custom login stuff used. Ideal would be to use only Spring Security