Capability-Authentication & Authorization (Spring)