view layer changes
spring security
finalising security changes: login / logout