initial spring security core changes