diff --git a/coffee-req/src/main/java/com/nice/coffee/web/WebController.java b/coffee-req/src/main/java/com/nice/coffee/web/WebController.java
index d1ceb02..64fe779 100644
--- a/coffee-req/src/main/java/com/nice/coffee/web/WebController.java
+++ b/coffee-req/src/main/java/com/nice/coffee/web/WebController.java
@@ -60,4 +60,10 @@ protected void ping(
 		response.getWriter().println("ping response: pong");
 	}
 	
+	@RequestMapping("/secured/ping")	
+	protected void securedPing(
+			HttpServletResponse response) throws Exception{
+		log.info( "got to secured ping" );
+		response.getWriter().println("secured ping response: pong");
+	}
 }
diff --git a/coffee-req/src/main/webapp/WEB-INF/spring-servlet.xml b/coffee-req/src/main/webapp/WEB-INF/spring-servlet.xml
index 23e9e07..1c58bc4 100644
--- a/coffee-req/src/main/webapp/WEB-INF/spring-servlet.xml
+++ b/coffee-req/src/main/webapp/WEB-INF/spring-servlet.xml
@@ -23,6 +23,10 @@
 	<mvc:annotation-driven />
 	<mvc:default-servlet-handler />
 
+	<!-- dont use debug! https://jira.spring.io/browse/SEC-1885 >
+	<sec:debug>
+	-->
+	
 	<sec:http pattern="/login/**" security="none" />
 	<sec:http pattern="/forgotPasswordPage" security="none" />
 	<sec:http pattern="/forgotPassword" security="none" />
@@ -30,16 +34,13 @@
 	<sec:http pattern="/createAccount" security="none" />
 
 	<sec:http authentication-manager-ref="authenticationManager">
-		<sec:intercept-url pattern="/secure/**" access="ROLE_USER" />
+		<sec:intercept-url pattern="/secured/**" access="ROLE_USER" />
 		<sec:anonymous />
 
 		<sec:form-login login-page="/login/login.htm"
 			authentication-success-handler-ref="authenticationSuccessHandler"
 			authentication-failure-handler-ref="authenticationFailureHandler" />
 
-		<!-- sec:remember-me data-source-ref="dataSource" user-service-ref="userDetailsService"/ -->
-
-
 	</sec:http>
 
 
@@ -67,7 +68,7 @@
 	<!-- decide how you wanna work: in-mem repo, or jdbc impl: -->
 	<!-- bean class="com.ohadr.auth_flows.mocks.InMemoryAuthenticationAccountRepositoryImpl" / -->
 	<bean id="userDetailsService"
-		class="com.ohadr.auth_flows.core.gae.gae.GAEAuthenticationAccountRepositoryImpl" />
+		class="com.ohadr.auth_flows.core.gae.GAEAuthenticationAccountRepositoryImpl" />
 
 	<!--bean class="com.ohadr.auth_flows.core.jdbc.JdbcAuthenticationPolicyRepositoryImpl" / -->
 	<bean
diff --git a/coffee-req/src/main/webapp/WEB-INF/web.xml b/coffee-req/src/main/webapp/WEB-INF/web.xml
index e8832ac..b7e6d91 100644
--- a/coffee-req/src/main/webapp/WEB-INF/web.xml
+++ b/coffee-req/src/main/webapp/WEB-INF/web.xml
@@ -26,11 +26,11 @@ http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" version="2.5">
 	</context-param>
  
 	<!-- if we work with Spring-security, we already have a listener -->
-	<listener>
+	<!-- listener>
 		<listener-class>
         	org.springframework.web.context.ContextLoaderListener
 		</listener-class>
-	</listener>
+	</listener-->
 
 
 	<servlet>
diff --git a/coffee-req/src/main/webapp/secure/index.html b/coffee-req/src/main/webapp/index.html
similarity index 100%
rename from coffee-req/src/main/webapp/secure/index.html
rename to coffee-req/src/main/webapp/index.html
diff --git a/coffee-req/src/main/webapp/secure/nespresso.js b/coffee-req/src/main/webapp/nespresso.js
similarity index 100%
rename from coffee-req/src/main/webapp/secure/nespresso.js
rename to coffee-req/src/main/webapp/nespresso.js
diff --git a/coffee-req/src/main/webapp/secure/style.css b/coffee-req/src/main/webapp/style.css
similarity index 100%
rename from coffee-req/src/main/webapp/secure/style.css
rename to coffee-req/src/main/webapp/style.css