Authentication provider conf in xml
Some more security
cleaning backend