[risk=low]Update a few more vulnerable packages (#3480)
[risk=low]Update a few more vulnerable packages (#3480)

* Update spring-security-web due to transitive vulnerability
* Update google-oauth-client-jetty due to transitive vulnerability
all-of-us/workbench,all-of-us/workbench,all-of-us/workbench,all-of-us/workbench,all-of-us/workbench,all-of-us/workbench,all-of-us/workbench,all-of-us/workbench,all-of-us/workbench