First step toward spring-security : activate but open to all requests