Fixed spring security config for multiple types of auth