Inject ClientDetailsService instead of AuthenticationManager
Disable csrf for resource server