change spring security configuration xml