role hierarchies & impersonation
removed some method annotations
secure every page
accessing security user
remember me