add cache-ref to authenticaiton-provider, add allow-empty-authorities to java-user-service by xuhuisheng · Pull Request #7 · spring-projects/spring-security