added spring security layer