Security URL interceptors are injected

+ Default values defined obviously
! All POST methods are forbidden for anybody.