anchor.diff:  doesn't need a `clientId` and `clientSecret` if it isn't using the
   `tokenInfoUri` (i.e. if it has `jwt.*` or `userInfoUri`).
   
  -By default *all* your endpoints are protected (i.e. "/**") but you can 
  +By default *all* your endpoints are protected (i.e. "+/**+") but you can 
   pick and choose by adding a `ResourceServerConfigurerAdapter` (standard
   Spring OAuth feature), e.g. to protect only the "/api/**" resources
   
  
positive.code: @EnableZuulProxy
  class Application {
    
    @RequestMapping('/')
    @ResponseBody
    String home() {
      'Hello World'
    }
  
  }
  ----
  
  
negative.code: `OAuth2SsoConfigurer` beans as well. The default logout path is
  "/logout" and it gets similar treatment, as does the "home" page
  (which is the logout success page, defaults to "/"). Those paths can
  be overriden by setting `oauth2.sso.*' (`loginPath`, `logoutPath` and
  `home.path`).
  
  For example if you want the resources under "/ui/**" to be protected with OAuth2:
  