想做忘記密碼功能，但老是被shiro攔截，沒(méi)登錄的請(qǐng)求都跳回登錄頁(yè)面

這是獲取驗(yàn)證碼的ajax
function getYZM() {
         $.ajax({
                 url:'user/forgetPwdYz.do',
                 type:"POST",
               async: false, 
               success: function(data){
                  alert("成功"); 
                  alert(data);
               },
                 error:function(data){
                      alert("失敗"); 
                   }
                 })
                    
    }
    這是shiro的配置
<!-- Shiro Filter -->
    <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
        <property name="securityManager" ref="securityManager" />
        
        <property name="loginUrl" value="/" />
        
        <property name="successUrl" value="/main/index" />
        
        <property name="unauthorizedUrl" value="/login_toLogin" />
        
        <property name="filterChainDefinitions">
            <value>
            //開(kāi)放user請(qǐng)求，還是一直在登錄頁(yè)面
            /user/*.do                    = anon
            /userYz.jsp/**                = anon
            
               /**                            = authc
            </value>
        </property>
    </bean>

應(yīng)該還需要改哪里？