* Expand spring-security fuzzing * remove comment from debugging that is now misleading the reader (#20)