Spring Security is great when the developer wants to secure his web app.
However, what about creating the account? and \"forgot password\"? most login pages
I think appfuse is a tool for what you want. This lines are from it's documentation:
AppFuse comes out of the box with features that many applications need, including: