spring security - change from @Secure to Requestmap