Modified security context to restrict access to /drink/* and /ingredient/* URL patterns, so the REST API cannot be called by unauthenticated users.