update to Spring Security 3.2.4