Bump org.springframework.security:spring-security-bom (#2507)

Bump org.springframework.security:spring-security-bom (#2507) #2422