diff --git a/README.md b/README.md
index d49c2b7..dd30d29 100644
--- a/README.md
+++ b/README.md
@@ -1,3 +1,7 @@
 Aloha, funky time!
 
+curl -i http://localhost:8080/transactions
+
+curl -i http://localhost:8080/transactions/1
+
 curl -i -X POST -H "Content-Type:application/json" -d '{"account":"http://localhost:8080/accounts/1","amount":12.3,"date":"2016-05-31T22:00:00.000+0000","description":"test","category":"http://localhost:8080/categories/1"}' http://localhost:8080/transactions 
\ No newline at end of file
diff --git a/src/main/java/de/tilman/transactions/SecurityConfiguration.java b/src/main/java/de/tilman/transactions/SecurityConfiguration.java
index 83a2bef..8989491 100644
--- a/src/main/java/de/tilman/transactions/SecurityConfiguration.java
+++ b/src/main/java/de/tilman/transactions/SecurityConfiguration.java
@@ -23,9 +23,9 @@ public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
 	@Override
 	protected void configure(HttpSecurity http) throws Exception {
 		// Basis-Schutz: Nur autorisierte Zugriffe (feingranulare Steuerung über Assertions)
-//		http.authorizeRequests()
-//			.antMatchers(HttpMethod.GET, "/public/**").permitAll()
-//			.anyRequest().authenticated();
+		http.authorizeRequests()
+			.antMatchers(HttpMethod.GET, "/public/**").permitAll()
+			.anyRequest().authenticated();
 		
 //		http.httpBasic(); // XXX mit HTTP Basic Auth funktioniert der Logout nicht richtig
 		http.formLogin();