configure(final HttpSecurity http)

    @Override
    protected void configure(final HttpSecurity http) throws Exception {
        http.csrf().disable()
                .authorizeRequests()
                .antMatchers("/", "/index** ", "/login**", "/static/** **", "/** .js", "/** .json", "/** .ico").permitAll()
                .antMatchers("/main**", "/points**", "/logout**").authenticated()
                .and().logout()
                .logoutUrl("/logout")
                .deleteCookies("JSESSIONID");
    }