override fun configure(http: HttpSecurity) {
    http
        .authorizeRequests()
        .antMatchers("/logout").permitAll()
        // other configurations
}