Add spring security tag, more security rules