The web security config had to be simplified. Remains the problem of the CSRF for the registration.
Disabling the CSRF for some requests (like the registration)
New client with explicit authentication scheme.
Login / logout
UI model compatible with JSON
Admin login OK
Preemptive authentication for the client
Simplification for the login
Validation of an account