upgraded to latest spring security core plugin to enable requestmap constraints with http method