Configure spring security along with in-memory users
(application-security.xml).  Add spring security to web.xml along with
ContextLoaderListener to load application-security.xml.  Add test JSP
pages to test spring security and move spring MVC pages to WEB-INF/views
for security.  Add AbstractController to be implemented if needed.