switch to java7
added declarative security with form based login