adding authorization
switching between thymeleaf and jsp + started work on global method security