Use spring.security prefix instead of security.security

Use spring.security prefix instead of security.security #564