title: Can't load my css when using spring security and thymeleaf
body: <p>I am not able to load my css file while using spring security and thymeleaf.</p>
  
  <p>Whenever i use rel="stylesheet" it gives me Strict MIME enable error.</p>
  
  <p>My css file is in resources/static folder </p>
  
  <p>My html file is resources/template.</p>
  
  <p>HTML HEAD:</p>
  
  <pre><code>&lt;head&gt;
  &lt;meta charset="utf-8"&gt;
  &lt;meta http-equiv="X-UA-Compatible" content="IE=edge"&gt;
  &lt;meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"&gt;
  
  &lt;title&gt;Login&lt;/title&gt;
  &lt;meta http-equiv="content-type" content="text/css; charset=UTF-8"&gt;
  &lt;script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"&gt;&lt;/script&gt;
  
  
  &lt;link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.2/css/bootstrap.min.css"
        integrity="sha384-Smlep5jCw/wG7hdkwQ/Z5nLIefveQRIY9nfy6xoR1uRYBtpZgI6339F5dgvm/e9B" crossorigin="anonymous"&gt;
  
  &lt;link href="https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css" rel="stylesheet"
        integrity="sha384-wvfXpqpZZVQGK6TAh5PVlGOfQNHSoD2xbE+QkPxCAFlNEevoEH3Sl0sibVcOQVnN" crossorigin="anonymous"&gt;
  &lt;script src="https://code.jquery.com/jquery-3.2.1.min.js"&gt;&lt;/script&gt;
  &lt;script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"
          integrity="sha384-ZMP7rVo3mIykV+2+9J3UJ46jBk0WLaUAdn689aCwoqbBJiSnjAK/l8WvCWPIPm49"
          crossorigin="anonymous"&gt;&lt;/script&gt;
  &lt;script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.2/js/bootstrap.min.js"
          integrity="sha384-o+RDsa0aLu++PJvFqy8fFScvbHFLtbvScb8AjopnFD+iEQ7wo/CG0xlczd+2O/em"
          crossorigin="anonymous"&gt;&lt;/script&gt;
  
  &lt;link th:href="auth.css" type="text/css" href="../static/auth.css" &gt;
  &lt;!--&lt;link  href="../static/auth.css" type="text/css" rel="stylesheet"&gt;--&gt;
  </code></pre>
  
  <p></p>
  
  <p>My Spring Security Code:</p>
  
  <pre><code> @Configuration
  @EnableWebSecurity
  public class SpringSecurityConfig extends WebSecurityConfigurerAdapter {
  
      @Override
      protected void configure(HttpSecurity http) throws Exception {
          http
                  .authorizeRequests()
                  .antMatchers("/css/**","/static/**", "/resources/**","/.*.css").permitAll()
                  .anyRequest().fullyAuthenticated()
                  .and()
                  .formLogin()
                  .loginPage("/login").permitAll();
      }
  
  }
  </code></pre>