Spring oauth2 ver 2.0.7, 404 error on endpoint /oauth/token

I got problem when try to integrate out web app with Spring oauth2 the end point /oauth/token is mapped for both GET and POST method

when access: http://ift.tt/1afsNdd

**server return:**Bad client credentials

its ok, however when I add the client_secret http://ift.tt/1PeXiAo

server return 404 error (as I know this should happen when the API is not mapped only)

Some of my configuration:

<security:http use-expressions="true" entry-point-ref="authenticationEntryPoint" create-session="never">
    <!-- for all users (login & non-login) -->
    <security:intercept-url pattern="/favicon.ico" access="permitAll" />
    <security:intercept-url pattern="/bower_components/**" access="permitAll"/>
    <security:intercept-url pattern="/locales/**" access="permitAll"/>
    <security:intercept-url pattern="/ov_components/**" access="permitAll"/>
    <security:intercept-url pattern="/scripts/**" access="permitAll"/>
    <security:intercept-url pattern="/styles/**" access="permitAll"/>
    <security:intercept-url pattern="/template/**" access="permitAll" />
    <security:intercept-url pattern="/webstart/classes/**" access="permitAll" />
    <security:intercept-url pattern="/assets/**" access="permitAll" />

    <!-- only for non-login users -->
    <security:intercept-url pattern="/login.html" access="!isAuthenticated()" />
    <security:intercept-url pattern="/upgrade.html" access="!isAuthenticated()" />
    <security:intercept-url pattern="/api/login" access="!isAuthenticated()" />

    <!-- only for admin user & no-license OV -->
    <security:intercept-url pattern="/noLicense.html" access="hasAnyRole('ROLE_ADMIN_NO_LICENSE')" />

    <security:intercept-url pattern="/**" access="!isAuthenticated()" />
    <security:access-denied-handler ref="customAccessDeniedHandler"/>
    <!-- Add filter to extract access token from request and perform authentication -->
    <security:custom-filter ref="customOAuth2AuthenProcessingFilter" before="PRE_AUTH_FILTER" />
    <security:expression-handler ref="oauthWebExpressionHandler" />
</security:http>
<security:http pattern="/oauth/token" create-session="stateless" entry-point-ref="authenticationEntryPoint" authentication-manager-ref="clientAuthenticationManager">
    <security:intercept-url pattern="/oauth/token" access="IS_AUTHENTICATED_FULLY" />
    <security:anonymous enabled="false" />
    <security:custom-filter ref="clientCredentialsTokenEndpointFilter" after="BASIC_AUTH_FILTER" />
    <security:access-denied-handler ref="customAccessDeniedHandler" />
</security:http>
<bean id="clientCredentialsTokenEndpointFilter" class="org.springframework.security.oauth2.provider.client.ClientCredentialsTokenEndpointFilter">
    <property name="authenticationManager" ref="clientAuthenticationManager" />
</bean>

<security:authentication-manager id="clientAuthenticationManager">
    <security:authentication-provider user-service-ref="clientDetailsUserService" />
</security:authentication-manager>

<bean id="clientDetailsUserService" class="org.springframework.security.oauth2.provider.client.ClientDetailsUserDetailsService">
    <constructor-arg ref="clientDetails" />
</bean>
<bean id="authenticationEntryPoint"
      class="my.app.com.login.AuthenticationEntryPoint">
    <constructor-arg name="loginUrl" value="/login.html" />
</bean>