<security:http> <security:intercept-url pattern="/web/**" access="IS_AUTHENTICATED_ANONYMOUSLY"/> </security:http>
SecurityContextHolder.getContext().getAuthentication() return null
原文：http://www.cnblogs.com/cobble19/p/4343432.html
