remove the access of cc/callback

src/main/resources/config/spring-security.xml

@@ -16,6 +16,7 @@
 	<sec:http pattern="/adminUser/*" security="none" />
 
 	<sec:http pattern="/favicon.ico" security="none" />
+	<sec:http pattern="/cc/*" security="none" />
 
 	<sec:http access-decision-manager-ref="" auto-config="true" access-denied-page="/you-will-not-want-to-be-here">
 		<sec:intercept-url pattern="/order/orderList/list_refund" access="ROLE_CTRIP_PAY,ROLE_OP,ROLE_DEV,ROLE_PROD,ROLE_RISK,ROLE_ASSIST" />