I have a Spring web app, secured with Spring Security, running on EC2. In front of the EC2 instance is an Elastic Load Balancer with an SSL cert (https terminates at the load ba
use below lines of code in web.xml
Login and Restricted Space URLs /j_security_check /loginpage.rose CONFIDENTIAL
it makes forced to use HTTPS.