Allow @EnableGlobalMethodSecurity in a non webapp

Fixes gh-202