This restores compatibility with Spring Security 4.0 so, ideally, it should be fixed and merged forwards into master before 1.3.0.M1 is released