Correct spring security configuration

Question

I have spring boot service with the next URL paths:

1. localhost:8080/foo/ - returns my index.html. Requests are caught by this method

   @GetM