DefaultFilterChainValidator should check for duplicate AuthorizationFilter instances as well as the common error of having a login page URL protected by the AuthorizationFilter.