CG-84 implement spring security with xml config

also add user-role-check for comments and some cosmetics to the right
sidebar