Removed IUserService from SecurityAggregate.

It can enforce uniqueness anyway with its true invariants.