Update to the latest spring security
Remove query strings from api.js

According to the PageSpeed plugin resources with a "?" in the URL are
not cached by some proxy caching servers.