fixed configuration on spring-security.xml