YB #3 Moved async api to controller with none Spring Security