Fixed Spring Security authorization