updated to spring-boot 1.1.5 and fixed security issues