If there is a bean of type WebSecurityConfigurerAdapter, this adds the
annotation. This will make sure that the annotation is
present with default security auto-configuration and also if the user adds custom
security and forgets to add the annotation. If
been added or if a bean with name has
been configured by the user, this will back-off.