<beans:beans xmlns="http://www.springframework.org/schema/security"
  xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xsi:schemaLocation="http://www.springframework.org/schema/beans
    http://www.springframework.org/schema/beans/spring-beans-4.0.xsd
    http://www.springframework.org/schema/security
    http://www.springframework.org/schema/security/spring-security-3.2.xsd">

  <http pattern="/login.html*" security="none" />

  <http auto-config="true">
    <intercept-url pattern="/**" access="ROLE_USER" />
    <form-login login-page="/login.html" default-target-url="/index.html"
      authentication-failure-url="/login.html?error" username-parameter="username"
      password-parameter="password" />
    <logout logout-success-url="/login.html?logout" />
  </http>

  <authentication-manager>
    <authentication-provider>
      <user-service>
        <user name="wpetit" password="wpetit" authorities="ROLE_USER" />
      </user-service>
    </authentication-provider>
  </authentication-manager>

</beans:beans>

<beans:beans xmlns="http://www.springframework.org/schema/security"
  xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xsi:schemaLocation="http://www.springframework.org/schema/beans
    http://www.springframework.org/schema/beans/spring-beans-4.0.xsd
    http://www.springframework.org/schema/security
    http://www.springframework.org/schema/security/spring-security-3.2.xsd">

  <http pattern="/login.html*" security="none" />
  <http pattern="/css/**" security="none" />
  <http pattern="/script/**" security="none" />

  <http auto-config="true">
    <intercept-url pattern="/**" access="ROLE_USER" />
    <form-login login-page="/login.html" default-target-url="/index.html"
      authentication-failure-url="/login.html?error" username-parameter="username"
      password-parameter="password" />
    <logout logout-success-url="/login.html?logout" />
  </http>

  <authentication-manager>
    <authentication-provider>
      <user-service>
        <user name="wpetit" password="wpetit" authorities="ROLE_USER" />
      </user-service>
    </authentication-provider>
  </authentication-manager>

</beans:beans>

Update security allow css and scripts
Update security allow css and scripts