updates - jersey, get/put xml/json with security