minor, spring-security version bump