Spring MVC Threat