Spring Security - Unauthorized though permitting all requests

Question

I have such a web config in Spring Boot App:

import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotatio