get rid of annotations and use xml config for spring security