Spring Security configuration for handling Ajax requests