added basic authentication method
default resource endpoint is set to PERMIT_ALL
added forbidden exception