<security:form-login
                login-page="/login"
                default-target-url="/main"
                authentication-failure-url="/login?error"
                username-parameter="username"
                login-processing-url="/login"
                password-parameter="password" />

        <security:intercept-url pattern="/users" access="ROLE_ADMIN" />
        <security:intercept-url pattern="('/main', '/newMeeting', '/newRequest', '/userInfo')" access="ROLE_ADMIN, ROLE_USER" />
        <security:logout logout-success-url="/index" invalidate-session="true" delete-cookies="JSESSIONID" />