Instructing Spring Security to use method annotations