added "in comment" the 'oauth2EndpointUrlFilter' but it does not fix it