spring security improvements