update spring security config