extracted security setup in TimesheetEnvironmentLoaderListener.kt to trait TimesheetShiroSecurity.kt
moved security related classes and traits to package 'security'
cleaned up unused imports and deleted commented out code