Unit test verifies that all controller request mappings have security annotations