Spring Security filter added to web.xml