Resource not being filtered by Spring security
===

I created this simple AdminController:

    @Controller
    @RequestMapping("admin")
    public class AdminController {
    	@PreAuthorize("hasAuthority('ROLE_ADMIN')")
    	@RequestMapping(value = "/", method = RequestMethod.GET)
    	public @ResponseBody String welcomeAdmin() {
    		return "Spring Security - ROLE_ADMIN";
    	}	
    	@PreAuthorize("hasAuthority('ROLE_ADMIN')")
    	@RequestMapping(value = "/{query}", method = RequestMethod.GET)
    	public @ResponseBody String welcomeAdmin(@PathVariable String query) {
    		return query;
    	}
    }

This is the **security-context.xml**:

	<http auto-config="true">
		<intercept-url pattern="/admin*" access="ROLE_ADMIN"/>
		<logout logout-success-url="/admin" />
	</http>

	<authentication-manager>
		<authentication-provider>
			<user-service>
				<user name="user" password="password" authorities="ROLE_USER" />
				<user name="admin" password="password" authorities="ROLE_ADMIN" />
			</user-service>
		</authentication-provider>
	</authentication-manager>
Which is loaded here in the **web.xml**:

	<servlet>
		<servlet-name>appServlet</servlet-name>
		<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
		<init-param>
			<param-name>contextConfigLocation</param-name>
			<param-value>
			    /WEB-INF/spring/appServlet/servlet-context.xml
			    /WEB-INF/spring/appServlet/security-context.xml
			</param-value>
		</init-param>
		<load-on-startup>1</load-on-startup>
	</servlet>

There are no errors, but the `/admin` resource is accessible to anyone, why is it that the resource is not being filtered by the Spring security?