upgrades to spring security 3.2 - testing work as well