migrate from container managed authentication to spring security
updated spring and spring security versions