code:     protected boolean requiresAuthentication(final HttpServletRequest request, final HttpServletResponse response) {
          boolean result = request.getRequestURI().contains(getFilterProcessesUrl());
          result |= isTokenExpired();
          if (logger.isDebugEnabled()) {
              logger.debug("requiresAuthentication = " + result);
          }
          return result;
      }
      
  