http.authorizeRequests()
                .anyRequest().authenticated()
                .and()
                .formLogin()
                .loginPage("/login")
                .defaultSuccessUrl("/products/add")
                .failureUrl("/loginfailed")
                .permitAll()
                .and()
                .logout()
                .logoutUrl("/logout")