whitelist, will be removed

src/main/java/com/ffii/tsms/config/security/SecurityConfig.java

@@ -32,10 +32,13 @@ public class SecurityConfig {
     public static final String LOGIN_URL = "/login";
     public static final String LDAP_LOGIN_URL = "/ldap-login";
 
+    public static final String INVOICE = "/invoices/pdf";
+
     public static final String[] URL_WHITELIST = {
             INDEX_URL,
             LOGIN_URL,
-            LDAP_LOGIN_URL
+            LDAP_LOGIN_URL,
+            INVOICE,
     };
 
     @Lazy