Bump org.springframework.security:spring-security-web (#10635)

Bump org.springframework.security:spring-security-web (#10635) #3241