We should update to Spring Security 4.2.2 (Due March 1) to resolve https://github.com/spring-projects/spring-security/issues/4211