Tested secured annotation on home controller - welcome works OK without auth