expense-tracker: Refactored domain rules, using @SecurityParameterBinding