title: @PreAuthorize(permitAll) still requires authentication
body: <p>I have the following example method in my <code>Repository</code> (with <code>@RepositoryRestResource</code> annotation):</p>
  
  <pre><code>@Override
  @PreAuthorize("permitAll")
  @PostAuthorize("permitAll")
  public Iterable&lt;User&gt; findAll();
  </code></pre>
  
  <p>But I'm still getting <code>401 Unauthorized</code>, event when I add those <code>permitAll</code> annotation to whole Repository interface.</p>
  
  <p>I got this as my <code>WebSecurityConfigurerAdapter</code>:</p>
  
  <pre><code>@EnableWebSecurity
  @EnableGlobalMethodSecurity(prePostEnabled = true)
  @Configuration
  class WebSecurityConfig extends WebSecurityConfigurerAdapter {
      @Override
      protected void configure(final HttpSecurity http) throws Exception {
          http.authorizeRequests().anyRequest().fullyAuthenticated().and().httpBasic().and().csrf().disable();
      }
  }
  </code></pre>
  
  <p>I suppose this takes precedence over those method annotations, bu I don't know how to fix this.</p>