correct spring-security-acl config