Org Spring Framework Security Maven Dependency Scope