Why should you do a mock-up of the user interface? How should you do a mock-up? How should you disable Spring Security from the backend?