New intercept-urls in spring-security.xml