Use WebApplicationInitializer for web.xml
Migrate to the new java config for spring-security