https://docs.spring.io/spring-security/site/docs/5.4.0-M1/reference/html5/#servlet-authentication-granted-authority