maven dependency warnings fixed. change security spec