Refactor security tests to use groovy config instead of xml files