test custom spring security filter chain and support oauth2