Customising Spring Security could be a challenge as there seems to be lack of practical examples. Recently I tried to customise my login page when authentication fails. I found this blog really useful:
Spring Security - Using custom Authentication Processing Filter