#50 make GlobalMethodSecurityConfiguration loading of AuthenticationManager lazy