adding spring security, putting maven back and a touch of cleaning