user JPA instead of jdbc
package move
role,auth