upgrade spring security
move spring config to spring folder