hardcoded path changed back to http URLs in spring-security.xml

hardcoded path changed back to http URLs in spring-security.xml