a temporary config for spring security. freeze now for other projects