change configuration for security. now user can hove either ADMIN or
USER role
+ Inject lib, even though didn't get why I have to use it.
refactoring
renaming of security.xml
clean up