security in JAX-RS 1.1 (RESTEasy)