use statless security + use RestResponseEntityExceptionHandler + log if sample data already loaded