added minimal security config (jpa and security config are working)