We have to add : 1) simple UI + jsp controllers and place some of them (except /about) behind OAuth2 2) Make api controllers more "interest"