Security class works without an AccessDecisionManager
WIP-commit of the security demo app and auto configuration