title: Enabling WebSecurityConfigurer via @Profile does not work
body: <p>I have, what I think is, a very simple and basic setup for locally running a Spring Boot webapp with some authentication.</p>
  
  <p>I would expect that when I run this application through Spring Boot, that my custom security settings would override the default behavior when I specify the <code>local</code> profile.</p>
  
  <p><code>mvn -Dspring.profiles.active="local" spring-boot:run</code></p>
  
  <p>Maybe I'm specifying the <code>profiles.active</code> wrong, but when the app runs, it still spits out a generated password to use, and doesn't seem to allow any access to the <code>/login</code> path without said authentication.</p>
  
  <p>I'm also not seeing the active profiles under <code>/env</code> either, which may be a little telling.</p>
  
  <p>I have a <code>WebSecurityConfigurer</code> overridden like so:</p>
  
  <pre><code>@Configuration
  @EnableWebSecurity
  @Profile("local")
  @Order(SecurityProperties.ACCESS_OVERRIDE_ORDER)
  public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
  
      @Override
      protected void configure(HttpSecurity http) throws Exception {
          http.authorizeRequests().anyRequest().fullyAuthenticated().and().formLogin().permitAll();
      }
  
      @Override
      protected void configure(AuthenticationManagerBuilder auth) throws Exception {
          auth.inMemoryAuthentication().withUser("admin").password("admin").roles("ADMIN", "USER")
          .and().withUser("user").password("user").roles("USER");
  
      }
  }
  </code></pre>
  
  <p>My main <code>@Configuration</code> class is your standard Spring Java-style base config:</p>
  
  <pre><code>@Configuration
  @ComponentScan
  @EnableAutoConfiguration
  public class Application {
  
      public static void main(String[] args) {
          SpringApplication.run(Application.class, args);
      }
  }
  </code></pre>