upgraded spring to 3.0.5.RELEASE which required security package
refactoring.  Note: this may require spring bean changes.