How are the GrantedAuthority roles defined for each user? I have an authorities table as in the springmvc example from the repo, but how does Spring know to look there for calls like @PreAuthorize("hasRole(ROLE_ADMIN)")?