fix spring security dependency conflict