anchor.diff:  public class MultiHttpSecurityConfig {
   	@Bean                                                             <1>
   	public UserDetailsService userDetailsService() throws Exception {
  +		// ensure the passwords are encoded properly
  +		UserBuilder users = User.withDefaultPasswordEncoder();
   		InMemoryUserDetailsManager manager = new InMemoryUserDetailsManager();
  -		manager.createUser(User.withUsername("user").password("password").roles("USER").build());
  -		manager.createUser(User.withUsername("admin").password("password").roles("USER","ADMIN").build());
  +		manager.createUser(users.username("user").password("password").roles("USER").build());
  +		manager.createUser(users.username("admin").password("password").roles("USER","ADMIN").build());
   		return manager;
   	}
   
  
positive.code: ----
  @Bean
  public UserDetailsService userDetailsService() throws Exception {
  	InMemoryUserDetailsManager manager = new InMemoryUserDetailsManager();
  	manager.createUser(User.withUsername("user").password("password").roles("USER").build());
  	manager.createUser(User.withUsername("admin").password("password").roles("USER","ADMIN").build());
  	return manager;
  }
  ----
  
negative.code: 
  @Autowired
  public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
  	// ensure the passwords are encoded properly
  	UserBuilder users = User.withDefaultPasswordEncoder();
  	auth
  		.jdbcAuthentication()
  			.dataSource(dataSource)
  			.withDefaultSchema()
  			.withUser(users.username("user").password("password").roles("USER"))
  			.withUser(users.username("admin").password("password").roles("USER","ADMIN"));
  }
  ----
  
  