trouble with freeMarker and security authorization