move sabongpro.js to service folder for security, modify spring security pattern for guest controller