Add security to rest controllers.