Correct Anonymous Authentication for HTTP Access

Refactoring the NiFi Spring Security configuration added a check to determine whether application properties allowed anonymous authentication. The nifi.security.allow.anoymous.authentication property is false in the default configuration, but the changing the property should not be necessary when configuring HTTP without TLS.

The Spring Security configuration should be adjusted to restore current behavior, which enables anonymous authentication when configuring unencrypted HTTP.