some changes in api
implemented spring security