fixed spring security bug