added security tests
added custom security using userdetailservice