added spring security (not tested)