使用DefaultHttpFirewall替换spring security默认的StrictHttpFirewall，用于解决客户端配置meta url时加上/，抛The request was rejected because the URL was not normalized.异常的问题
