spring security xml configuration
xml tweaks: prepare for spring security integration