added webflow, security, java config, removed web.xml