adds jwt bearer resource server auth support

[jaserud]

Proposed changes:

• Spring auth config and properties along with new spring profile
• Added decorators wraping query execution strategy to add security context to gql context and verify auth scopes

Note this PR is very similar to this: https://github.com/icgc-argo/song-search/pull/20