1. enhance spring security config; 2. import init-js attribute on body tag into final page as a tag (sitemesh);