Internal API security

plus some clean up of spring xml files
Even tinier: Using -> Uses (consistency with the previous comment)