I have the following definition...
I think you have to add use-expressions tag to your http configuration in security xml for example:
use-expressions
http
... ...
Edit: Well I am not sure what version of spring security you are using. I know this works on 3.0 but for older versions I am not sure.