Add viewResolver for JSP.
Add spring security's authentication.
Specify URL which requires authentication.
Specify a ROLE.