I was trying out "security setup" to add security to my Roo-based application. After it generated the Spring Security config, I tweaked it to limit access to certain URLs unless logged in as 'admin'. It worked great until I tried logging in. Upon attempting to login, I get "java.lang.NoClassDefFoundError: org/apache/commons/codec/binary/Hex".
Apparently Common Codec needs to be added to the pom.xml file. This is something that I would have expected "security setup" to do for me.