spring security remove usernamepasswordauthenticationfilter