diff --git a/src/main/webapp/WEB-INF/spring/spring-main.xml b/src/main/webapp/WEB-INF/spring/spring-main.xml
index 5c1803e9ff2971938fa6d5449c703789f17e7c3d..5308d696f9700f6ffe0ee4f50864b9faa032443b 100644
--- a/src/main/webapp/WEB-INF/spring/spring-main.xml
+++ b/src/main/webapp/WEB-INF/spring/spring-main.xml
@@ -25,8 +25,6 @@
 		</property>
 	</bean>
 
-	<import resource="spring-security.xml" />
-
 	<context:component-scan base-package="de.thm.arsnova.dao,de.thm.arsnova.services,de.thm.arsnova.events" />
 	<context:annotation-config />
 
diff --git a/src/main/webapp/WEB-INF/web.xml b/src/main/webapp/WEB-INF/web.xml
index 75b4f85dfa2d9be9d897517d4ce23c473a78bce5..65258940ff8260f58fd5e8d4d543af8ec4fd3b21 100644
--- a/src/main/webapp/WEB-INF/web.xml
+++ b/src/main/webapp/WEB-INF/web.xml
@@ -7,7 +7,8 @@
 		<param-name>contextConfigLocation</param-name>
 		<param-value>
 			/WEB-INF/spring/spring-main.xml
-        </param-value>
+			/WEB-INF/spring/spring-security.xml
+		</param-value>
 	</context-param>
 	<context-param>
 		<param-name>log4jConfigLocation</param-name>
@@ -95,8 +96,5 @@
 
 	<session-config>
 		<tracking-mode>COOKIE</tracking-mode>
-
-		<!-- delete sessions after 6 hours -->
-		<session-timeout>360</session-timeout>
 	</session-config>
 </web-app>
diff --git a/src/test/java/de/thm/arsnova/controller/FeedbackControllerTest.java b/src/test/java/de/thm/arsnova/controller/FeedbackControllerTest.java
index 0c9ae13d77bc7dee889f5aff3c8891f9406befbc..ee8364a34fb8df444d11893660bb04deb08b53c7 100644
--- a/src/test/java/de/thm/arsnova/controller/FeedbackControllerTest.java
+++ b/src/test/java/de/thm/arsnova/controller/FeedbackControllerTest.java
@@ -23,6 +23,7 @@ import de.thm.arsnova.services.StubUserService;
 @ContextConfiguration(locations = {
 		"file:src/main/webapp/WEB-INF/spring/arsnova-servlet.xml",
 		"file:src/main/webapp/WEB-INF/spring/spring-main.xml",
+		"file:src/main/webapp/WEB-INF/spring/spring-security.xml",
 		"file:src/test/resources/test-config.xml",
 		"file:src/test/resources/test-socketioconfig.xml"
 })
diff --git a/src/test/java/de/thm/arsnova/controller/LoginControllerTest.java b/src/test/java/de/thm/arsnova/controller/LoginControllerTest.java
index 2b2287dd40b005e494caf32c75d3330b915a078e..83b01fa6b53d74c469858493b66818c3d4302501 100644
--- a/src/test/java/de/thm/arsnova/controller/LoginControllerTest.java
+++ b/src/test/java/de/thm/arsnova/controller/LoginControllerTest.java
@@ -45,6 +45,7 @@ import de.thm.arsnova.services.StubUserService;
 @ContextConfiguration(locations = {
 		"file:src/main/webapp/WEB-INF/spring/arsnova-servlet.xml",
 		"file:src/main/webapp/WEB-INF/spring/spring-main.xml",
+		"file:src/main/webapp/WEB-INF/spring/spring-security.xml",
 		"file:src/test/resources/test-config.xml",
 		"file:src/test/resources/test-socketioconfig.xml"
 })
diff --git a/src/test/java/de/thm/arsnova/controller/SessionControllerTest.java b/src/test/java/de/thm/arsnova/controller/SessionControllerTest.java
index 3b8ff88723dbeae89c5873522777534b565b3369..ea36714a7196928e57a0e925bbcfc988738140a5 100644
--- a/src/test/java/de/thm/arsnova/controller/SessionControllerTest.java
+++ b/src/test/java/de/thm/arsnova/controller/SessionControllerTest.java
@@ -23,6 +23,7 @@ import de.thm.arsnova.services.StubUserService;
 @ContextConfiguration(locations = {
 		"file:src/main/webapp/WEB-INF/spring/arsnova-servlet.xml",
 		"file:src/main/webapp/WEB-INF/spring/spring-main.xml",
+		"file:src/main/webapp/WEB-INF/spring/spring-security.xml",
 		"file:src/test/resources/test-config.xml",
 		"file:src/test/resources/test-socketioconfig.xml"
 })
diff --git a/src/test/java/de/thm/arsnova/controller/StatisticsControllerTest.java b/src/test/java/de/thm/arsnova/controller/StatisticsControllerTest.java
index 788c22d376d5b2486b7bb7641d32dfed27fb7f16..79f86fcc30aa14d938c60448e3c602b6c6a4c5fd 100644
--- a/src/test/java/de/thm/arsnova/controller/StatisticsControllerTest.java
+++ b/src/test/java/de/thm/arsnova/controller/StatisticsControllerTest.java
@@ -20,6 +20,7 @@ import org.springframework.web.context.WebApplicationContext;
 @ContextConfiguration(locations = {
 		"file:src/main/webapp/WEB-INF/spring/arsnova-servlet.xml",
 		"file:src/main/webapp/WEB-INF/spring/spring-main.xml",
+		"file:src/main/webapp/WEB-INF/spring/spring-security.xml",
 		"file:src/test/resources/test-config.xml",
 		"file:src/test/resources/test-socketioconfig.xml"
 })
diff --git a/src/test/java/de/thm/arsnova/services/FeedbackServiceTest.java b/src/test/java/de/thm/arsnova/services/FeedbackServiceTest.java
index 06409e42b480b04fc1cf9118e84534722672967f..fa1b8ae9f3cf535f41baa136ac2ad3bfdf4acf53 100644
--- a/src/test/java/de/thm/arsnova/services/FeedbackServiceTest.java
+++ b/src/test/java/de/thm/arsnova/services/FeedbackServiceTest.java
@@ -1,6 +1,6 @@
 /*
  * Copyright (C) 2012 THM webMedia
- * 
+ *
  * This file is part of ARSnova.
  *
  * ARSnova is free software: you can redistribute it and/or modify
@@ -39,6 +39,7 @@ import de.thm.arsnova.exceptions.NotFoundException;
 @ContextConfiguration(locations = {
 		"file:src/main/webapp/WEB-INF/spring/arsnova-servlet.xml",
 		"file:src/main/webapp/WEB-INF/spring/spring-main.xml",
+		"file:src/main/webapp/WEB-INF/spring/spring-security.xml",
 		"file:src/test/resources/test-config.xml"
 })
 public class FeedbackServiceTest {
@@ -48,14 +49,14 @@ public class FeedbackServiceTest {
 
 	@Autowired
 	StubUserService userService;
-	
+
 	@Autowired
 	private StubDatabaseDao databaseDao;
 
 	@Before
 	public final void setup() {
 		userService.setUserAuthenticated(false);
-		
+
 		feedbackService.saveFeedback("87654321", 0, new TestUser("testuser01"));
 		feedbackService.saveFeedback("87654321", 0, new TestUser("testuser02"));
 		feedbackService.saveFeedback("87654321", 1, new TestUser("testuser11"));
@@ -73,8 +74,8 @@ public class FeedbackServiceTest {
 		feedbackService.saveFeedback("87654321", 3, new TestUser("testuser35"));
 		feedbackService.saveFeedback("87654321", 3, new TestUser("testuser36"));
 		feedbackService.saveFeedback("87654321", 3, new TestUser("testuser37"));
-		
-		
+
+
 		feedbackService.saveFeedback("18273645", 0, new TestUser("testuser01"));
 		feedbackService.saveFeedback("18273645", 0, new TestUser("testuser02"));
 		feedbackService.saveFeedback("18273645", 1, new TestUser("testuser11"));
@@ -96,9 +97,9 @@ public class FeedbackServiceTest {
 		feedbackService.saveFeedback("18273645", 3, new TestUser("testuser39"));
 		feedbackService.saveFeedback("18273645", 3, new TestUser("testuser310"));
 		feedbackService.saveFeedback("18273645", 3, new TestUser("testuser311"));
-		
+
 	}
-	
+
 	@After
 	public final void cleanup() {
 		databaseDao.cleanupTestData();
@@ -162,10 +163,10 @@ public class FeedbackServiceTest {
 		userService.setUserAuthenticated(true);
 		assertEquals(2.1904, feedbackService.getAverageFeedback("18273645"), 0.001);
 	}
-	
+
 	public static class TestUser extends User {
 		private static final long serialVersionUID = 1L;
-		
+
 		public TestUser(String username) {
 			super( new UsernamePasswordAuthenticationToken(username, "secret") );
 		}
diff --git a/src/test/java/de/thm/arsnova/services/QuestionServiceTest.java b/src/test/java/de/thm/arsnova/services/QuestionServiceTest.java
index 96e81937abb951675eff7769f6301a30db4a638e..8113ce0bf56584db965aeaa74481dd3b0c9d18ed 100644
--- a/src/test/java/de/thm/arsnova/services/QuestionServiceTest.java
+++ b/src/test/java/de/thm/arsnova/services/QuestionServiceTest.java
@@ -1,6 +1,6 @@
 /*
  * Copyright (C) 2012 THM webMedia
- * 
+ *
  * This file is part of ARSnova.
  *
  * ARSnova is free software: you can redistribute it and/or modify
@@ -18,7 +18,9 @@
  */
 package de.thm.arsnova.services;
 
-import static org.junit.Assert.*;
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
 
 import org.junit.After;
 import org.junit.Test;
@@ -36,6 +38,7 @@ import de.thm.arsnova.exceptions.UnauthorizedException;
 @ContextConfiguration(locations = {
 		"file:src/main/webapp/WEB-INF/spring/arsnova-servlet.xml",
 		"file:src/main/webapp/WEB-INF/spring/spring-main.xml",
+		"file:src/main/webapp/WEB-INF/spring/spring-security.xml",
 		"file:src/test/resources/test-config.xml"
 })
 public class QuestionServiceTest {
@@ -45,7 +48,7 @@ public class QuestionServiceTest {
 
 	@Autowired
 	StubUserService userService;
-	
+
 	@Autowired
 	private StubDatabaseDao databaseDao;
 
@@ -73,7 +76,7 @@ public class QuestionServiceTest {
 		userService.setUserAuthenticated(true);
 		assertEquals(1, questionService.getSkillQuestionCount("12345678"));
 	}
-	
+
 	@Test
 	public void testShouldMarkInterposedQuestionAsReadIfSessionCreator() throws Exception {
 		userService.setUserAuthenticated(true);
@@ -82,12 +85,12 @@ public class QuestionServiceTest {
 		theQ.set_id("the internal id");
 		theQ.setSessionId("12345678");
 		databaseDao.interposedQuestion = theQ;
-		
+
 		questionService.readInterposedQuestion(theQ.get_id());
-		
+
 		assertTrue(theQ.isRead());
 	}
-	
+
 	@Test
 	public void testShouldNotMarkInterposedQuestionAsReadIfRegularUser() throws Exception {
 		userService.setUserAuthenticated(true, "regular user");
@@ -96,9 +99,9 @@ public class QuestionServiceTest {
 		theQ.set_id("the internal id");
 		theQ.setSessionId("12345678");
 		databaseDao.interposedQuestion = theQ;
-		
+
 		questionService.readInterposedQuestion(theQ.get_id());
-		
+
 		assertFalse(theQ.isRead());
 	}
 }
diff --git a/src/test/java/de/thm/arsnova/services/SessionServiceTest.java b/src/test/java/de/thm/arsnova/services/SessionServiceTest.java
index 06956f115a28b51d14b39d478183e94d3e23e14d..6fb1f06a2b70b46243b8c94bfd75c3c713e02923 100644
--- a/src/test/java/de/thm/arsnova/services/SessionServiceTest.java
+++ b/src/test/java/de/thm/arsnova/services/SessionServiceTest.java
@@ -1,6 +1,6 @@
 /*
  * Copyright (C) 2012 THM webMedia
- * 
+ *
  * This file is part of ARSnova.
  *
  * ARSnova is free software: you can redistribute it and/or modify
@@ -21,11 +21,13 @@ package de.thm.arsnova.services;
 import static org.junit.Assert.assertNotNull;
 import static org.junit.Assert.assertNull;
 import static org.junit.Assert.assertTrue;
+import static org.mockito.Matchers.anyString;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
 
 import java.util.Arrays;
 
-import static org.mockito.Mockito.*;
-
 import org.junit.After;
 import org.junit.Test;
 import org.junit.runner.RunWith;
@@ -47,7 +49,8 @@ import de.thm.arsnova.exceptions.UnauthorizedException;
 @ContextConfiguration(locations = {
 		"file:src/main/webapp/WEB-INF/spring/arsnova-servlet.xml",
 		"file:src/main/webapp/WEB-INF/spring/spring-main.xml",
-		"file:src/test/resources/test-config.xml" })
+		"file:src/main/webapp/WEB-INF/spring/spring-security.xml",
+"file:src/test/resources/test-config.xml" })
 public class SessionServiceTest {
 
 	@Autowired
@@ -55,7 +58,7 @@ public class SessionServiceTest {
 
 	@Autowired
 	private StubUserService userService;
-	
+
 	@Autowired
 	private StubDatabaseDao databaseDao;
 
@@ -64,7 +67,7 @@ public class SessionServiceTest {
 		databaseDao.cleanupTestData();
 		userService.setUserAuthenticated(false);
 	}
-	
+
 	@Test
 	public void testShouldGenerateSessionKeyword() {
 		assertTrue(sessionService.generateKeyword().matches("^[0-9]{8}$"));
@@ -118,19 +121,19 @@ public class SessionServiceTest {
 		IDatabaseDao tempDatabase = (IDatabaseDao) ReflectionTestUtils.getField(getTargetObject(sessionService), "databaseDao");
 		try {
 			userService.setUserAuthenticated(true);
-	
+
 			Session session = new Session();
 			session.setCreator(userService.getCurrentUser().getUsername());
 			Question q1 = new Question();
 			Question q2 = new Question();
-	
+
 			IDatabaseDao mockDatabase = mock(IDatabaseDao.class);
 			when(mockDatabase.getSkillQuestions(userService.getCurrentUser(), session)).thenReturn(Arrays.asList(q1, q2));
 			when(mockDatabase.getSession(anyString())).thenReturn(session);
 			ReflectionTestUtils.setField(getTargetObject(sessionService), "databaseDao", mockDatabase);
-	
+
 			sessionService.deleteSession(session.getKeyword(), userService.getCurrentUser());
-	
+
 			verify(mockDatabase).deleteQuestionWithAnswers(q1);
 			verify(mockDatabase).deleteQuestionWithAnswers(q2);
 			verify(mockDatabase).deleteSession(session);
diff --git a/src/test/java/de/thm/arsnova/services/StatisticsServiceTest.java b/src/test/java/de/thm/arsnova/services/StatisticsServiceTest.java
index ec348f3b67f4f70c53846a385ff1806983817693..33ab4921ab83b03771500d8b4877ac0be0852d79 100644
--- a/src/test/java/de/thm/arsnova/services/StatisticsServiceTest.java
+++ b/src/test/java/de/thm/arsnova/services/StatisticsServiceTest.java
@@ -18,6 +18,7 @@ import de.thm.arsnova.entities.Statistics;
 @ContextConfiguration(locations = {
 		"file:src/main/webapp/WEB-INF/spring/arsnova-servlet.xml",
 		"file:src/main/webapp/WEB-INF/spring/spring-main.xml",
+		"file:src/main/webapp/WEB-INF/spring/spring-security.xml",
 		"file:src/test/resources/test-config.xml"
 })
 public class StatisticsServiceTest {
@@ -39,12 +40,12 @@ public class StatisticsServiceTest {
 		session.setActive(false);
 		databaseDao.saveSession(session);
 	}
-	
+
 	@After
 	public final void cleanup() {
 		databaseDao.cleanupTestData();
 	}
-	
+
 	@Test
 	public final void testShouldReturnNoActiveUsers() {
 		int actual = statisticsService.countActiveUsers();
@@ -55,7 +56,7 @@ public class StatisticsServiceTest {
 	public final void testShouldReturnCurrentActiveUsers() {
 		Session session = new Session();
 		session.setKeyword("1278127812");
-		
+
 		userService.setUserAuthenticated(true);
 		databaseDao.registerAsOnlineUser(userService.getCurrentUser(), session);
 
@@ -63,7 +64,7 @@ public class StatisticsServiceTest {
 		assertEquals(1, actual);
 		userService.setUserAuthenticated(false);
 	}
-	
+
 	@Test
 	public final void testShouldReturnStatistics() {
 		Statistics actual = statisticsService.getStatistics();