Used base access denied exception instead of http one
Used security annotations instead of firewall rules
Used installation bundle to configure bundles