bump spring-security to recommended version

1.14 has spring-security 5.4.5, will bump to 5.4.8
1.13 has spring-security 5.3.9, will bump to 5.3.11
1.12 has spring-security 5.2.10, will bump to 5.2.12