Removed duplicate csrf().disable() statement in Spring security config