Should security of application be configured before testing the entire application?

I have a Spring Mvc application .I have not automated the testing process.I have also not secured the application.

1. My Question is What should I do First? Whether I should configure the security of my application or I should Start Testing My Spring Mvc Web Application and developing test cases?