merge controller and security under "Java Backend"