2022 https://spring.io/blog/2022/02/21/spring-security-without-the-websecurityconfigureradapter