jsf view mapping, security annotations