Clarify documentation related to Spring Security's content-negotiation

[mbhave]

This line in the docs can seem a bit ambiguous Form-based login or HTTP Basic security (depending on Content-Type). We should clarify what depending on Content-Type means.