update for Spring Security Java Config API changes