I like the leaner frameworks more (dropwizard, jooby and ilk), but spring security is hard to beat for authentication and authorization. I still default to spri

I like the leaner frameworks more (dropwizard, jooby and ilk), but spring security is hard to beat for authentication and authorization. I still default to spring for any public facing apps or sites.