[enhancement] bumped spring security version due to security bug fix

http://spring.io/blog/2014/03/11/cve-2014-009-fixed-in-spring-security-3-2-2-and-3-1-6