security configuration moved from xml to java beans part #1