security fix - play-web now depends on play secure to check permissions
merge conflict