Fixing URLs access in Spring Security config