changed groupId and added security constraints