My security configuration is as follows:
http.authorizeRequests().antMatchers(\"/authenticate\").fullyAuthenticated().anyRequest().permitAll().and().httpBasi