before removing spring data rest
finally security config is ok