Upgrade to Spring 4.0.8 and Spring Security 3.2.5
fix for AbstractAddressingEndpointMapping to filter SmartEndpointInterceptors
Polish