we are using angular and spring boot and spring security. so disable web security on HTML files but want to restrict some HTML files like story.html. how to use a URL patter