<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns="http://www.springframework.org/schema/security"
	xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="
	http://www.springframework.org/schema/security 
	http://www.springframework.org/schema/security/spring-security-3.2.xsd
		
	http://www.springframework.org/schema/beans 
	http://www.springframework.org/schema/beans/spring-beans-4.0.xsd">


	<http use-expressions="false" >

		<intercept-url pattern="/home" access="ROLE_USER" />
		<intercept-url pattern="/check_user" access="ROLE_ADMIN" />
		<intercept-url pattern="/discuss/list" access="ROLE_USER" />
		
		<session-management> 
            <concurrency-control max-sessions="1"  session-registry-alias="sessionRegistry" />
        </session-management>

		<access-denied-handler error-page="/accessDenied"/>


		<form-login login-page='/login' 
			default-target-url="/discuss/list"
			authentication-failure-url="/login?error=true"  
			/>
		
		<logout logout-success-url="/"   />
		
		<remember-me data-source-ref="dataSource"
			token-validity-seconds="1209600"
		/>

	</http>
	<authentication-manager>
		<authentication-provider user-service-ref="myJdbc">
			<password-encoder ref="myBcrypt"/>
		</authentication-provider>
	</authentication-manager>

<beans:bean id="myBcrypt" class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder" >
<beans:constructor-arg name="strength" value="15" />
</beans:bean>
</beans:beans>