CAS-1380: Fixed conflicts between spring and spring-security dependencies

Including the `cas-server-webapp-support` module in the overlay causes older versions of Spring to be included in the build. This is because the module references an older version of spring-security that is incompatible with Spring that CAS uses. 

To fix the problem, versions of spring-security and spring are upgraded and matched to avoid incorrect transient dependencies.