Remove useless annotation

Security annotation can not be read in web module
because this is using a different spring context
Add installation doc
Fix root user event
Update hibernate in update instead of create-drop