spring security

protect all pages without protect / and /tournament