Spring security downgrade