So we tried to switch to Spring 3.x. Seems that acegi security is compromised, but I haven't tested that thoroughly, maybe anyone wants to give it a shot?
The only differences that we did was to mess a bit around with a couple of pom.xml files. I attach them here. One file is from the whole project and another one is from subsonic-main.