@Controller
public class UserController {
    @RequestMapping(value = "/register", method = RequestMethod.GET)
    public ModelAndView register() {

        ModelAndView model = new ModelAndView();
        model.setViewName("register");
        return model;
    }

    @RequestMapping(value = "/register", method = RequestMethod.POST)
    public ModelAndView create(){
...

<form role="form" action="register" method="POST">

<form role="form" action="/register" method="POST">

<input type="hidden" name="${_csrf.parameterName}" value="${_csrf.token}" />