SecurityConfig: removed @Configuration