Dziwne zachowanie Spring Security.

Witam ,mam problem ze Spring Security. Stworzyłem 3 role (ROLE_ADMIN, ROLE_MOD, ROLE_USER). W jsp stworzyłem 3 menu dla każdej roli. W każdym menu powtarzają się 3 linki tj. "/messages", "/profile", "/logout". Jeśli loguję się jako MOD lub USER wszystko ładnie działa, jednak jak zaloguję się jako ADMIN to nie mam dostępu do "/messages", "/profile". Dziwi mnie to, że "/logout" śmiga bez problemu.

websecurity config

 @Override
	protected void configure(HttpSecurity http) throws Exception {

		//@formatter:off

		
		
		
			http
				.authorizeRequests()
					.antMatchers("/"
							,"/tutorials"
							,"/search"
							,"/about"
							,"/contact"
							,"/register",
							"/css/*",
							"/js/*",
							"/img/*")
					.permitAll()
					.antMatchers(
							"/messages",
							"/profile",
							"/logout",
							"/newsmanager",
							"/tutorialsmanager",
							"/usersmanager",
							"/sendemails"
							)
						.hasRole("ADMIN")
					.antMatchers(
							"/suggestnews",
							"/suggesttutorial",
							"/messages",
							"/profile",
							"/logout"
							)
						.hasRole("MOD")
					.antMatchers(
							"/messages",
							"/profile",
							"/logout"
							)
						.hasRole("USER")
					.and()
				.formLogin()
					.loginPage("/login")
					.defaultSuccessUrl("/")
					.permitAll()
					.and()
				.logout()
					.permitAll(); 
			
			//@formatter:on		

	}

fragment jsp:

	<sec:authorize access="hasRole('ROLE_ADMIN')">
						<button class="btn btn-default dropdown-toggle" type="button"
							id="dropdownMenu1" data-toggle="dropdown" aria-haspopup="true"
							aria-expanded="true">
							Account <span class="caret"></span>
						</button>
						<ul class="dropdown-menu" aria-labelledby="dropdownMenu1">
							<li><a href="/messages">Messages</a></li>
							<li><a href="/profile">Profile</a></li>
							<li role="separator" class="divider"></li>
							<li><a href="/tutorialsmanager">Tutorials manager</a></li>
							<li><a href="/newsmanager">News manager</a></li>
							<li><a href="/usersmanager">Users manager</a></li>
							<li><a href="/sendemails">Send emails</a></li>
							<li role="separator" class="divider"></li>
							<li><a href="javascript:$('#logoutForm').submit();">Log
									out</a></li>
						</ul>
	</sec:authorize>



					<!--  APPEARED FOR ROLE_USER -->
	<sec:authorize access="hasRole('ROLE_USER')">
					<button class="btn btn-default dropdown-toggle" type="button"
						id="dropdownMenu2" data-toggle="dropdown" aria-haspopup="true"
						aria-expanded="true">
						Account <span class="caret"></span>
					</button>
					<ul class="dropdown-menu" aria-labelledby="dropdownMenu2">
						<li><a href="/messages">Messages</a></li>
						<li><a href="/profile">Profile</a></li>
						<li role="separator" class="divider"></li>
						<li><a href="javascript:$('#logoutForm').submit();">Log
								out</a></li>
					</ul>
	</sec:authorize>


					<!--  APPEARED FOR ROLE_MOD -->
	<sec:authorize access="hasRole('ROLE_MOD')">
					<button class="btn btn-default dropdown-toggle" type="button"
						id="dropdownMenu3" data-toggle="dropdown" aria-haspopup="true"
						aria-expanded="true">
						Account <span class="caret"></span>
					</button>
					<ul class="dropdown-menu" aria-labelledby="dropdownMenu3">
						<li><a href="/messages">Messages</a></li>
						<li><a href="/profile">Profile</a></li>
						<li role="separator" class="divider"></li>
						<li><a href="/suggestnews">Suggest a news</a></li>
						<li><a href="/suggesttutorial">Suggest a tutorial</a></li>
						<li role="separator" class="divider"></li>
						<li><a href="javascript:$('#logoutForm').submit();">Log
								out</a></li>
					</ul>
	</sec:authorize>