Upgrade to Spring security 3.2.0.RC1 for async servlet support.

This should fix the troubles we're having with the stability of the
selenium tests, as the Ajax push service was causing the HTTP session
security store to be cleared.