added spring security and basic auth requirement