I’m migrating a simple JSF app to a higher version of Spring Security. App contains two pages – login and main page, which is accesible to a few in-memory users. Initially I was using Spring 3.2.9.RELEASE and Spring Security 3.2.5.RELEASE.