remove dependency to spring-security