Remove unused security xml
Remove unused class
Use default "deployment" user to avoid the need for custom security config files