added one-to-many orphanRemoval
Merge branch 'jpa-exercises' into working
added security todos