Update dependencies to Spring 4.0.1 and Security 3.2.  This required
some relatively minor Java API changes to fix compile errors.  The
STOMP javascript libraries also broke due to no longer using a
queue-suffix and instead just subscribing to /user/whatever.  Thanks
to the WebSocketPortfolio project that showed these changes.