change logical place for config files, add passwordEncoder for spring security