Understanding the SecurityContext in Spring Security