title: What is the difference between @EnableWebSecurity and @EnableWebMvcSecurity?
body: <h2>@EnableWebSecurity</h2>
  
  <p>The JavaDoc documentaion:</p>
  
  <blockquote>
    <p>Add this annotation to an <code>@Configuration</code> class to have the <code>Spring Security</code> configuration defined in any <code>WebSecurityConfigurer</code> or more likely by extending the <code>WebSecurityConfigurerAdapter</code> base class and overriding individual methods.</p>
  </blockquote>
  
  <h2>@EnableWebMvcSecurity</h2>
  
  <p>The JavaDoc documentaion:</p>
  
  <blockquote>
    <p>Add this annotation to an <code>@Configuration</code> class to have the <code>Spring Security</code> configuration integrate with <code>Spring MVC</code>.</p>
  </blockquote>
  
  <ul>
  <li>What exactly does it mean to '<em>integrate with Spring MVC</em>' ? What extra behaviors do I get?</li>
  <li>I found <a href="http://docs.spring.io/spring-security/site/docs/3.2.x/guides/hellomvc.html#logging-out" rel="noreferrer">guides</a> &amp; <a href="https://stackoverflow.com/questions/21195615/upgrading-spring-security-to-3-2-0-release-no-longer-provides-csrf-token-in-spri">answers</a>, which suggest that this annotation adds <code>CSRF Tokens</code> to <code>Spring MVC</code> Forms, is this the only thing it adds?</li>
  </ul>