Создание регистрации и аутентификации spring. Логика регистрации и авторизации

@RestController
public class UserController {
    @Autowired private UserService userService;
    @Autowired private SecurityService securityService;
    @Autowired private UserValidator userValidator;
 
    @RequestMapping(value = "/registration", method = RequestMethod.POST)
    public String registration(RegistrationPresentation registrationPresentation) {
        userValidator.validate(registrationPresentation);
 
        if (bindingResult.hasErrors()) {
            return "not registration";
        }
 
        userService.save(registrationPresentation);
 
        securityService.autoLogin(registrationPresentation.getLogin(), registrationPresentation.getConfirmPassword());
 
        return "registration";
    }
 
    @RequestMapping(value = "/login", method = RequestMethod.GET)
    public String login(RegistrationPresentation registrationPresentation) {
 
        return "login";
    }
}

@Configuration
@EnableWebSecurity
public class WebSecurityConfig  extends WebSecurityConfigurerAdapter {
    @Autowired
    private UserDetailsService userDetailsService;
    @Autowired
    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
        auth.userDetailsService(userDetailsService).passwordEncoder(bCryptPasswordEncoder());
    }
 
    @Bean
    public BCryptPasswordEncoder bCryptPasswordEncoder() {
        return new BCryptPasswordEncoder();
    }
 
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
                .authorizeRequests()
                .antMatchers("/registration").permitAll()
                .anyRequest().authenticated()
                .and()
                .formLogin()
                .loginPage("/login")
                .permitAll()
                .and()
                .logout()
                .permitAll();
    }
}