downgrade to 3.2.6.RELEASE to avoid tricks in pom.xml linked with spring-security 3.2.0