update SprayAuthorizeWithAccessControl Specification