Spring Security's Method Security does not work in non-web environment

[mrioan]

We wrongly placed StormpathMethodSecurityAutoConfiguration and StormpathMethodSecurityConfiguration in our web module.

For example, the Boot-specific class should reside in stormpath-spring-security-webmvc-spring-boot-started. Be sure to remove:

1. stormpath.web.enabled from @ConditionalOnProperty
2. @ConditionalOnWebApplication
3. @AutoConfigureAfter(WebMvcAutoConfiguration.class)

That will not be the only change. We need need to be sure that a services like this works as expected (i.e. sayHello can only be executed by users with the MY_GROUP role):

public interface HelloService {

    static final String MY_GROUP = "GROUP_HREF_HERE";

    @PreAuthorize("hasRole('" + MY_GROUP + "')")
    String sayHello();

}