权限控制时报
Access is denied (user is not anonymous); delegating to AccessDeniedHandler
或者
AccessDeniedException : Access is denied
那么请确保最终传入
方法为：
UsernamePasswordAuthenticationToken(Object principal, Object credentials, Collection<? extends GrantedAuthority> authorities)
authorities 值为以下格式