added security.xml
SecurityPolicy.java