added http headers by spring security 3.2 #34