Use delegating authentication entry point to handle all secure endpoints...

.... Use path request matcher to determine the right entry point to use.