security in JAX-RS 2.0 (RESTEasy)