add SHA in spring-security.xml