How Does the Spring Security Filter Chain Work?