Implement remote service layer with security checks. Refactor external
calls to use remote interface. Cleaned unused controller method, JSPs.