Adjusting spring security to exclude public