upgrade springsecurity core version and fix asset permission issue