cleanup code, add comment , change AuthServiceProvider to
SecurityServiceProvider