inject does now work
Renamed AppUser to App
Security interceptor should now work