Removed currently non-working EJB's @RolesAllowed annotations, have to investigate more how the security context is propagated from UI to EJB