move security-core in, modify maven pom