added support to @Secured to protect urls