Top spring-security issues