anchor.diff:  @Configuration
   @Import({
           ...
  -        IsisModuleSecuritySpring.class,
  +        IsisModuleSecuritySpring.class,     // <.>
  +        AuthorizorBypass.class,             // <.>
           ...
   })
   public class AppManifest {
   }
   ----
  -
  -Make sure that no other `IsisModuleSecurityXxx` module is imported.
  +<.> make sure that no other `IsisModuleSecurityXxx` module is imported.
  +<.> or some other implementation of `Authorizor`.
   
   
   == Design
  
positive.code: 
  === Run the application
  
  You should now be able to run the application, selecting the "github-example" profile using this JVM argument:
  
      -Dspring.profiles.active=github-example
  
  If you are already signed into github:
  
  image::github-already-signed-in.png[width=200px]
  
  then you should be logged in directly; the app will show your user name:
  
  image::helloworld-shows-username.png[width=250px]
  
  On the other hand, if you are not signed in then you will be redirected to the github login page:
  
  image::github-login-page.png[width=300px]
  
  If you have 2FA enabled, then this also works:
  
  image::github-2fa.png[width=300px]
  
  and then, once again, you will be redirected to the app and it will show your user name:
  
  image::helloworld-shows-username.png[width=250px]
  
  Finally, if you log out then Spring will show a page to allow you to trigger the login process:
  
  image::github-sign-in-again.png[width=500px]
  
negative.code: [[_update-appmanifest]]
  == Update AppManifest
  
  In your application's `AppManifest` (top-level Spring `@Configuration` used to bootstrap the app), import the `IsisModuleSecuritySpring` module and remove any other `IsisModuleSecurityXxx` modules.
  
  Also, as this module provides no implementation of the xref:refguide:core:index/security/authorization/Authorizor.adoc[Authorizor] SPI, instead you will need some an alternative implementation, such as the xref:bypass:about.adoc[Bypass] implementation.
  (Note: this will in effect disable authorisation checks).
  
  [source,java]
  .AppManifest.java
  