GEOS-5824 http://..../geoserver matches wrong security filter chain