Bump org.springframework.security:spring-security-bom (#2554)

Bump org.springframework.security:spring-security-bom (#2554) #2451