So spring-security + a web app is secure by default (you don't need the actuator).
Attach a file by drag & drop or click to upload
