Move security files and remove roles

This MR attacks the scatteredness and complicatedness of our Security configurations.

I would like to propose we move all security related classes into a package 'security' for the sake of having this bubble of connected classes in the same place. This helps in understanding which classes do what in the security hierarchy, rather than having AuthenticationService (which is a UserDetailsService) in the services directory.