add applicationContext-security.xml
modify web.xml to detect applicationContext-security.xml