* added message source with wildcards * enhanced SecurityInterceptor * unit tests for HttpService