security config was fixed
use properties in spring XMLs