expense-tracker: enabled security, enabled JPA IDM configuration