I\'m using custom JWT filter with spring boot security configuration to allow certain API requests without JWT token. But permitAll() method in WebSecurity configuration is