New pull for Thymeleaf (#697)

* Expression-Based Access Control

PermitAll, hasRole, hasAnyRole etc.
I modified classes regards to Security

* Added test cases for Spring Security Expressions

* Handler Interceptor - logging example

* Test for logger interceptor

* Removed conflicted part

* UserInterceptor (adding user information to model)

* Spring Handler Interceptor - session timers

* Spring Security CSRF attack protection with Thymeleaf

* Fix and();

spring-thymeleaf/src/main/java/com/baeldung/thymeleaf/config/WebMVCSecurity.java

@@ -43,7 +43,6 @@ public class WebMVCSecurity extends WebSecurityConfigurerAdapter {
         .authenticated()
         .and()
         .httpBasic()
-        .and()
         ;
     }