pom.xml: updated Spring Security to 3.1.7

@see http://spring.io/blog/2014/08/15/cve-2014-3527-fixed-in-spring-security-3-2-5-and-3-1-7

No functional changes.