protected void configure(HttpSecurity http) throws Exception {
String[] defRoles = {"USER", "MOD", "ADMIN"};
Map<String, String> confMap = Config.getConfigMap();
ConfigObject c = Config.getConfig().getObject("security.protected");
ConfigValue apiSec = Config.getConfig().getValue("security.api");
boolean enableRestFilter = apiSec != null && "enabled".equals(apiSec.unwrapped());
for (String key : c.keySet()) {
ConfigValue cv = c.get(key);
ArrayList<String> patterns = new ArrayList<String>();
ArrayList<String> roles = new ArrayList<String>();