Spring security with deafult login page