security issue, commented in applicationContextSecurity