spring security query update