Use delegating authentication entry point to handle all secure endpoints. Use path request matcher to determine the right entry point to use.