Problem with JSF / Spring security 2.5

Hello,
First I would say sorry I dont speak English very well...
I use the Spring framework 2.5 to apply the security rules for hand interception on the page in my application J2ee, I want that the page is only accessible when the user is connected.
The problem is that when I do:

the page still accessible by typing main.jsf !
and when I do:

the page is not accessible even if the user authenticates!
what should I do to resolve this problem ?
Thank you in advance for your help!