Extend from OAuth2ServerConfigurerAdapter instead of WebSecurityConfigurerAdapter