Isn't it &lt;security:config&gt;