java configuration & RESTful security support