bumped springboot to more secure version
springboot was bumped from version 1.5.2.RELEASE to version 1.5.22.RELEASE.
Due to compatibility issues, we also had to bump "spring-security" from version 4.0.2.RELEASE to version 4.2.20.RELEASE.
see: