Latest Virago security updates (ldif, jsp etc.).  Does not actually use
custom security yet, still uses simple Spring security.