add /documents to spirng security