spring security added. rest/another is secured.