webservice-enabled: true
Your security.conf file can be found in
resources/conf/security/security.conf
.
For spring security you will need the following rule to allow access to
the user api, if parts of the site are public.
<intercept-url pattern="/twigkit/api/user" access="isAnonymous() or isAuthenticated()"/>