https://medium.com/@AlexanderObregon/an-introductory-guide-to-preauthorize-and-postauthorize-annotations-in-spring-security-7b62f6913275