Update Spring Session auto-configuration to ensure that the `DefaultCookieSerializer` doesn't break when Spring Security is not present on the classpath. Closes gh-16889
Update Spring Session auto-configuration to ensure that the `DefaultCookieSerializer` doesn't break when Spring Security is not present on the classpath. Closes gh-16889