changing scheme for logging in
initial checkin
Based on look at Spring Security's docs, it is best to segregate ui -vs- api entry into the system
project instead of task
simply changed order in matcher as my personal preference