http.cors().and().headers().frameOptions().disable();

http.requestCache().disable();

http.sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS));

http.sessionManagement().disable();

http.rememberMe();