I am getting some very weird behaviour from spring security. I am on 4.2.17 and I have this in my context: