POST problem fixed by adding .csrf().disable(); to configure method in
WebSecurityConfigurer - fixed by logbacks