Configuration for URL in WebSecurity