fix/add service layer security over SpringSecurity