http.authorizeRequests().antMatchers(/admin)
http.authorizeRequests().hasRole(USER)
http.authorizeRequests().permitAll()
http.authorizeRequests().authenticated()
http.authorizeRequests().fullyAuthentication()
http.authorizeRequests().access(hasRole(USER))
http.authorizeRequests().denyAll()