added security annotations and security class to check for sessions