BaseAuthenticationConfig now uses .authenticationManager()
#6 Doc Global Method Security