Add spring-web to pom.xml

Previously Spring Security was bringing in spring-web 3.1.x which
causes compilation errors stating HandlerMethodReturnValueHandler
cannot be resolved.

Now spring-web is explicitly listed in the pom's that were having
issues.