securityExpcetion & invalidCookieException moved to exception/ directory
security/* is done ...