HTTP 상태 [404]? [찾을 수 없음] 봄 보안에서 / login

스프링 보안에서 사용자 지정 로그인 양식에 문제가 있습니다. 나는 봄 mvc를 처음 사용했습니다. 현재 로그인 양식에서 제출 버튼을 클릭하면 404 Not found가 표시됩니다.

아래 코드 :

headerindex.jsp

<form class="navbar-form navbar-right" method="post" action="<c:url value="/login" />" id="form_login">
    <div class="form-group">
        <input type="text" class="form-control" name="username"
            placeholder="Username">
    </div>
    <div class="form-group">
        <input type="text" class="form-control" name="password"
            placeholder="Password">
    </div>
    <input type="hidden" name="${_csrf.parameterName}" value="${_csrf.token}" />
    <button type="submit" class="btn btn-default">Sign In</button>
</form>

security-context.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:security="http://www.springframework.org/schema/security"
    xsi:schemaLocation="http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-4.2.xsd
        http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">

    <security:authentication-manager>
        <security:authentication-provider>
            <security:jdbc-user-service data-source-ref="dataSource"
                users-by-username-query="select username, password, enabled from user where binary username = ?" />

        </security:authentication-provider>
    </security:authentication-manager>
    <security:http use-expressions="true">
        <security:intercept-url pattern="/" access="permitAll" />
        <security:intercept-url pattern="/index" access="permitAll" />
        <security:intercept-url pattern="/login" access="permitAll" />
        <security:intercept-url pattern="/**" access="denyAll" />
        <security:form-login authentication-success-forward-url="/home"
            login-page="/" password-parameter="password"
            username-parameter="username"
            authentication-failure-forward-url="/login?error=true" />
        <security:logout logout-success-url="/loggedout" />
        <security:access-denied-handler error-page="/denied" />
    </security:http>
    <security:global-method-security secured-annotations="enabled"></security:global-method-security>
</beans>

UsersDao.java

@Component("usersDao")
public class UsersDao {

    @Autowired
    private PasswordEncoder passwordEncoder;

    @Autowired
    private SessionFactory sessionFactory;


    public Session session() { 
        return sessionFactory.getCurrentSession();
    }

    @Transactional
    public void create(User user) {

        System.out.println(user);
        user.setPassword(passwordEncoder.encode(user.getPassword()));
        session().save(user);
    }

    public boolean exists(String username) {

        return getUser(username) != null;
    }

    @SuppressWarnings("unchecked")
    public List<User> getAllUsers() {

        return session().createQuery("from user").list();

    }

    public User getUser(String username) {
        Criteria criteria = session().createCriteria(User.class);
        criteria.add(Restrictions.idEq(username));
        return (User)criteria.uniqueResult();
    }