spring security settings fix