diff --git a/README.md b/README.md
index 0839b8a..c4cb037 100644
--- a/README.md
+++ b/README.md
@@ -2,3 +2,17 @@ coffee_req
==========
appengine app to order coffee - ShipIt !
+
+
+IF you want to secure static resources, such as HTML files, the way to do this using Spring MVC is to put them in directory A, and to
+map this location to path B. Then, using Spring Security, path B can be "secured".
+If resources are in path A and SS secures the same path, then when a user tries to reach a resource from the browser, it "confises" spring
+so the resource is not secured and the resource can be seen.
+
+
+
+
+
+
+
+If you want to secure JSP - this is wasy since it is not "static" resource.
\ No newline at end of file
diff --git a/coffee-req/src/main/webapp/WEB-INF/spring-servlet.xml b/coffee-req/src/main/webapp/WEB-INF/spring-servlet.xml
index 969e60f..ac72bda 100644
--- a/coffee-req/src/main/webapp/WEB-INF/spring-servlet.xml
+++ b/coffee-req/src/main/webapp/WEB-INF/spring-servlet.xml
@@ -27,7 +27,10 @@
-->
+
@@ -38,6 +41,7 @@
+