configured spring security access to js and css