reactivated logging
added spring security, migrated time-user, time-stamp
working on meaningful auth