Use simple security config DSL

build.gradle

@@ -73,7 +73,8 @@ dependencies {
     console "org.grails:grails-console"
 
     runtime 'org.grails.plugins:ajax-tags:1.0.0.RC1'
-    compile 'org.springframework.boot:spring-boot-starter-security'
+
+    compile 'org.grails.plugins:simple-spring-security:1.0.0.BUILD-SNAPSHOT'
 }
 
 task wrapper(type: Wrapper) {

grails-app/conf/simpleSpringSecurity.groovy

@@ -0,0 +1,17 @@
+security = {
+    authorize {
+        authenticated "/status/**", "/updateStatus/**", "/users/**", "/unfollow/**", "/follow/**"
+    }
+
+    loginUrl '/login'
+    logoutSuccessUrl '/'
+    csrf false
+}
+
+users = {
+    inMemory {
+        newUser username: 'jeff', password: 'password', roles: ['USER']
+        newUser username: 'graeme', password: 'password', roles: ['USER']
+        newUser username: 'lari', password: 'password', roles: ['USER']
+    }
+}

grails-app/conf/spring/resources.groovy

@@ -1,4 +1,3 @@
 // Place your Spring DSL code here
 beans = {
-    securityConfig org.grails.twitter.auth.WebSecurityConfig
 }