tutorial 24 - jdbc security query