Physically these two nodes can be combined but virtually both of them need different level of information w.r.t an UE. For example: HSS needs authentication, security and default bearer QoS information since it has to send these informations to MME while SPR holds other information related to charging and policy enforcement.