anchor.diff:  ----
   @Bean
   public UserDetailsService userDetailsService() throws Exception {
  +	// ensure the passwords are encoded properly
  +	UserBuilder users = User.withDefaultPasswordEncoder();
   	InMemoryUserDetailsManager manager = new InMemoryUserDetailsManager();
  -	manager.createUser(User.withUsername("user").password("password").roles("USER").build());
  -	manager.createUser(User.withUsername("admin").password("password").roles("USER","ADMIN").build());
  +	manager.createUser(users.username("user").password("password").roles("USER").build());
  +	manager.createUser(users.username("admin").password("password").roles("USER","ADMIN").build());
   	return manager;
   }
   ----
  
positive.code: public class MultiHttpSecurityConfig {
  	@Bean                                                             <1>
  	public UserDetailsService userDetailsService() throws Exception {
  		InMemoryUserDetailsManager manager = new InMemoryUserDetailsManager();
  		manager.createUser(User.withUsername("user").password("password").roles("USER").build());
  		manager.createUser(User.withUsername("admin").password("password").roles("USER","ADMIN").build());
  		return manager;
  	}
  
  
negative.code: 
  @Autowired
  public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
  	// ensure the passwords are encoded properly
  	UserBuilder users = User.withDefaultPasswordEncoder();
  	auth
  		.jdbcAuthentication()
  			.dataSource(dataSource)
  			.withDefaultSchema()
  			.withUser(users.username("user").password("password").roles("USER"))
  			.withUser(users.username("admin").password("password").roles("USER","ADMIN"));
  }
  ----
  
  