SecurityConfig: remove self-written AllExceptUrlsStartedWith

[php-coder]

I suggest to (try to) remove AllExceptUrlsStartedWith class and use AntPathRequestMatcher with NegatedRequestMatcher instead.

[php-coder]

According to this comment we can simplify it to:

csrf()
    .ignoringAntMatchers("/console/**")

that is great!