added spring security annotations to controller actions & config.groovy
filter