Spring Boot Security Allow All Apps