1) Removed redundant import
2) Add some Principle in controller methods for user security check
3) Separated UserService to UserService and UserSecurityService. The first returns user while the second returns UserDetails