title: In multiple HTTP Spring Security annotation configuration only one security is applied
body: <p>Trying to apply multiple http configuration as described in the documentation <a href="http://docs.spring.io/spring-security/site/docs/3.2.x/reference/htmlsingle/#multiple-httpsecurity" rel="nofollow noreferrer">multiple-httpsecurity</a></p>
  
  <p>Using Spring-4.1.6.RELEASE and Spring-Security-4.0.1.RELEASE (also tried 3.2.7.RELEASE) </p>
  
  <p>As a result I'm getting only the basic auth applied against the /api/** pattern the formLogin is not working. 
  In the filterChain object during debug we can see that the UsernamePasswordAuthenticationFilter is missing.</p>
  
  <p><img src="https://i.stack.imgur.com/7bb12.jpg" alt="enter image description here"></p>
  
  <p>On the other hand when tried to apply the @Order(1) annotation to the FormLoginWebSecurityConfigurerAdapter instead to the ApiWebSecurityConfigurationAdapter, got only the formLogin authentication applied. In the filterChain object during debug we can see that the BasicAuthenticationFilter is missing.</p>
  
  <p><img src="https://i.stack.imgur.com/JUdwh.png" alt="enter image description here"></p>
  
  <p>Feel free to use the source code of the project to reproduce the issue:
  <a href="https://github.com/kmarabet/SpringSecurityMultiHttpSample" rel="nofollow noreferrer">https://github.com/kmarabet/SpringSecurityMultiHttpSample</a></p>