add classpathresource messages.properties spring security
for internationalization : 
add 
  @Override
    public void configure(WebSecurity web) throws Exception {
        web
                .ignoring()
                .antMatchers("/resources/**", "/static/**", "/css/**", "/js/**", "/images/**");
    }
    
    and also for the login page an antMatchers with permitAll() : 
      @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
                .authorizeRequests()
                .antMatchers("/login*")
                .permitAll()
