Protecting User Data with Spring Security and OAuth2