added option disable spring security