This exposes my application without authentication. for e.g. i am able to see /students page which i was earlier not able to view without authentication.