Spring security несколько http

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
       xmlns:security="http://www.springframework.org/schema/security"
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
       xsi:schemaLocation="http://www.springframework.org/schema/beans
          [url]http://www.springframework.org/schema/beans/spring-beans-3.0.xsd[/url]
          [url]http://www.springframework.org/schema/security[/url]
          http://www.springframework.org/schema/security/spring-security-3.1.xsd">
    <security:authentication-manager alias="authenticationManager">
        <security:authentication-provider user-service-ref="accountService">
            <security:password-encoder ref="appPasswordEncoder"/>
        </security:authentication-provider>
    </security:authentication-manager>
    <security:http disable-url-rewriting="true" auto-config="true" use-expressions="true" pattern="/api/sec/**">
        <security:intercept-url pattern="/**" access="hasRole('ROLE_USER')"/>
        <security:form-login login-page="/api/require-login"
                             login-processing-url="/process-j-login"
                             default-target-url="/api/success-login"
                             always-use-default-target="true"
                             authentication-success-handler-ref="successfulAuthenticationHandler"
                             authentication-failure-url="/api/require-login"/>
    </security:http>
    <security:http disable-url-rewriting="true" auto-config="true" use-expressions="true" pattern="/**">
        <security:intercept-url pattern="/profile" access="hasRole('ROLE_USER')"/>
        <security:intercept-url pattern="/profile/**" access="hasRole('ROLE_USER')"/>
        <security:form-login login-page="/login-redirect.htm"
                             login-processing-url="/process-j-login"
                             default-target-url="/main"
                             always-use-default-target="false"
                             authentication-success-handler-ref="successfulAuthenticationHandler"
                             authentication-failure-url="/log-in"/>
        <security:logout logout-url="/log-out" logout-success-url="/main"/>
    </security:http>
    <bean id="appPasswordEncoder" class="app.util.security.AppPasswordEncoder"/>
    <bean id="successfulAuthenticationHandler" class="app.utils.SuccessfulAuthenticationHandler"/>
    <bean id="remMeSuccessfulAuthenticationHandler" class="app.utils.RemMeSuccessfulAuthenticationHandler"/>
</beans>