Coarse refactoring. Added spring-security featires.

Issues: 
	1. https protocol
	2. NetBeans Http-monitor breaks security (its filter is applied first, before DelegationSecurityFilter, so app is not loaded)

TODO:
	1. add db-based user service 
	2. add hashing to the passwords