switched to annotation in spring security. adds gitignore.
some css