Changes to configuration in Spring Security 4