https://docs.spring.io/spring-security/reference/5.8/servlet/authorization/authorize-requests.html#filtersecurityinterceptor-every-request