- removed web.xml and added java config 
- added java security config