add spring-security (core)