I have a Spring MVC REST service, with Spring Security (3.2.5.RELEASE) enabled. When I turn on @EnableWebMvcSecurity, a login form is automatically generated for me at http:
You need to send the csrf token when you submit the login form. Please add the below line in the HTML form:
csrf