@Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
                .antMatchers("/").hasAnyAuthority("Role1","Role2")
                .anyRequest().authenticated()
                .and()
            .formLogin()
                .loginPage("/login")
                .permitAll()
                .and()
            .logout()
                .permitAll();
    }

    @RequestMapping(value = {"","/","/main"}, method = RequestMethod.GET)
    public String red() {
        return "main/main";
    }
    
    @RequestMapping(value = "/login", method = {RequestMethod.GET, RequestMethod.POST})
    public String login() {
    	// If user already logined - redirect to main
    	if (!SecurityContextHolder.getContext().getAuthentication().getPrincipal().toString().equals("anonymousUser")){
    		return "main/main";
    	}else 
    		return "login";
    }