use java security config
Use Java Security Config