Spring Security Filter must be at the top of all filters