change to using spring-security-core 1.2.7.3