Card #226 remove no longer needed security controller endpoints (now found during user information retrieval after login),
remove JS SecurityService,
add @useronly to security service methods,
note: consider moving security controller methods to respective controller (e.g. groups etc)