@Override
    protected void configure(HttpSecurity http) throws Exception {
      http
        .httpBasic().and()
        .authorizeRequests()
          .antMatchers("/index.html", "/home.html", "/login.html", "/").permitAll().anyRequest()
          .authenticated().and()
          .csrf().csrfTokenRepository(csrfTokenRepository()).and()
        .addFilterAfter(new CsrfHeaderFilter(), CsrfFilter.class);
    }

@Autowired
	public void globalUserDetails(AuthenticationManagerBuilder auth) throws Exception {
		auth.inMemoryAuthentication().withUser("admin").password("admin").roles("ADMIN", "USER");
                auth.inMemoryAuthentication().withUser("test").password("test").roles("TESTER");
	}

@Autowired
    public void globalUserDetails(AuthenticationManagerBuilder auth) throws Exception {
        auth
        	.userDetailsService(userDatailsService)
        	.passwordEncoder(new Md5PasswordEncoder());
    }

@Override
	@Transactional(readOnly = true)
	public UserDetails loadUserByUsername(String username)
			throws UsernameNotFoundException {
		///User user = userDao.findUserByName(username); // пробовал так, но теперь пробую через userRepository
		User user = userRepository.findOne((long) 1); // здесь происходит зацикливание, просит снова ввести пароль и так по кругу
		
		if(user!=null){
			String password = user.getPassword();
			//additional information on the security object
			boolean enabled = user.getStatus().equals(UserStatus.ACTIVE);
			boolean accountNonExpired = user.getStatus().equals(UserStatus.ACTIVE);
			boolean credentialsNonExpired = user.getStatus().equals(UserStatus.ACTIVE);
			boolean accountNonLocked = user.getStatus().equals(UserStatus.ACTIVE);
			
			//Let's populate user roles
			Collection<GrantedAuthority> authorities = new ArrayList<GrantedAuthority>();
			for(Role role : user.getRoles()){
				authorities.add(new SimpleGrantedAuthority(role.getRoleName()));
			}
			
			//Now let's create Spring Security User object
			org.springframework.security.core.userdetails.User securityUser = new 
					org.springframework.security.core.userdetails.User(username, password, enabled, accountNonExpired, credentialsNonExpired, accountNonLocked, authorities);
			return securityUser;
		}else{
			throw new UsernameNotFoundException("User Not Found!!!");
		}
	}

.userDetailsService(userDatailsService)

import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;

@Service("userDetailsService")
public class UserDetailsServiceImpl implements UserDetailsService {
...