18: intercept-url w/ chaining
Make SampleSimpleWebSecurityConfig more concise
fix SampleSimpleWebSecurityConfig README