more clean. Updated Spring security config to allow public/static content