[java-sig-commits] [Bug 1553565] spring-security: LdapUserDetailsManager.java:changePassword( ) allows for direct modificiation of user passwords, bypassing the security configuration