Bump UAA and Login Server to 1.9.1 release

Upgrade Spring Framework to 4.0.8 to address CVE-2014-3625
http://www.pivotal.io/security/cve-2014-3625