removed resource server filter from default <security:http> block
fixed missing null check in request object parser