moved the security configuration into security-config.xml and persistence configuration into security-config.xml