fix spring security problem with java config