removed old javax.security dependency