spring security configuration and url changes