updated to later spring security revisions