added default httpSecurity
jetty/https workaround for https://github.com/spring-projects/spring-boot/issues/2232