All security configuration now done with javaconfig