removed spring-security dependency. uses reflection for dependent classes