add PreAuthorize Annotations to secure Controller-Methods