@Override
protected void configure(HttpSecurity http) throws Exception {

    String[] staticResources  =  {
        "/css/**",
        "/images/**",
        "/fonts/**",
        "/scripts/**",
    };

    http
        .authorizeRequests()
            .antMatchers(staticResources).permitAll()
            .anyRequest().authenticated()
            .and()
        .formLogin()
            .loginPage("/login").permitAll()
            .and()
        .logout().permitAll();
}