4-12短信验证码问题：
@Override
protected void configure(HttpSecurity http) throws Exception {
ValidateCodeFilter validateCodeFilter = new ValidateCodeFilter();
validateCodeFilter.setAuthenticationFailureHandler(fgsAuthenticationFailureHandler);
validateCodeFilter.setSecurityProperties(securityProperties);
validateCodeFilter.afterPropertiesSet();

 	SmsCodeFilter  smsCodeFilter = new SmsCodeFilter();
 	smsCodeFilter.setAuthenticationFailureHandler(fgsAuthenticationFailureHandler);
 	smsCodeFilter.setSecurityProperties(securityProperties);
 	validateCodeFilter.afterPropertiesSet();
 	
	http.addFilterBefore(smsCodeFilter,UsernamePasswordAuthenticationFilter.class)
	  .addFilterBefore(validateCodeFilter,UsernamePasswordAuthenticationFilter.class)
	  .formLogin() 
	  .loginPage("/authentication/require")
	  .loginProcessingUrl("/authentication/form")
	  .successHandler(fgsAuthenticationSuccessHandler)
	  .failureHandler(fgsAuthenticationFailureHandler)
	  .and()
	  .rememberMe()
		.tokenRepository(persistentTokenRepository())
		.tokenValiditySeconds(securityProperties.getBrowser().getRememberMeSeconds())
		.userDetailsService(userDetailsService)
//http.httpBasic()
    .and()
      .authorizeRequests()
      .antMatchers("/authentication/require","/authentication/mobile",securityProperties.getBrowser().getLoginPage(),
    		  "/code/*").permitAll()
      .anyRequest()
      .authenticated()
	  .and()
	  .csrf().disable()
	  .apply(smsCodeAuthenticationSecurityConfig);				
}

启动项目，图形验证码过滤器起作用可以返回{“content”:“验证码的值不能为空”}）；短信验证码filter无效,即使不发送验证码，直接点登陆也能返回用户信息？