Spring security c 3 на 4

<beans:beans xmlns="http://www.springframework.org/schema/security"
    xmlns:beans="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.springframework.org/schema/security [url]http://www.springframework.org/schema/security/spring-security-4.0.xsd[/url]
        [url]http://www.springframework.org/schema/beans[/url] http://www.springframework.org/schema/beans/spring-beans-4.2.xsd">
 
    <global-method-security pre-post-annotations="enabled" />
    <!-- enable use-expressions -->
    <http auto-config="true" use-expressions="true">
        <intercept-url pattern="/admin/**" access="hasRole('ADMIN')" />
        <!-- access denied page -->
        <access-denied-handler error-page="/403" />
        <form-login login-page="/login" default-target-url="/admin/home"   login-processing-url="/j_spring_security_check"
            authentication-failure-url="/login?error" username-parameter="username"
            password-parameter="password" />
        <logout logout-success-url="/login?logout" delete-cookies="JSESSIONID" invalidate-session="true" />
    </http>
    <authentication-manager>
        <authentication-provider> 
            <user-service>
                <user name="user" password="password" authorities="ADMIN"/>
            </user-service>
        </authentication-provider>
    </authentication-manager>
</beans:beans>

        <intercept-url pattern="/admin/**" access="hasRole('ADMIN')" />