some fixes
add spring security