<sec:authorize access="!hasRole('ROLE_ADMIN') || !hasRole('ROLE_MANAGER') || !hasRole('ROLE_USER') || getRole()">
<a href="/login">Log in</a>
</sec:authorize>
<sec:authorize access="hasRole('ROLE_ADMIN') || hasRole('ROLE_MANAGER') || hasRole('ROLE_USER')">
<a href="#">Log out</a>
</sec:authorize>