title: How to ignore Spring Security config for every thing except a pattern
body: <p>I have a rest webservice configured as a spring boot application.
  All my rest urls have a base path "/api/...".
  I am also serving static content from my application.
  I need to configure security ONLY for the web service i.e., URLs that start with "/api/..." but give the other static content w/o applying security.</p>
  
  <p>I've only seen examples where we filter some url patterns via:</p>
  
  <pre><code>@Override
  public void configure(WebSecurity web) throws Exception {
      web.ignoring().antMatchers("/resources/*");
  }
  </code></pre>
  
  <p>but not otherwise ...</p>