.antMatchers("/photos/**").hasAnyAuthority("ROLE_USER","SCOPE_READ")
.and()
.requestMatchers()
.antMatchers("/photos/**","/oauth/token","/oauth/clients/**","/oauth/users/**")
.and()
.apply(new OAuth2ServerConfigurer())
.resourceId(SPARKLR_RESOURCE_ID);
}