title: java.lang.ClassNotFoundException: org.springframework.security.access.expression.SecurityExpressionHandler when using <security:authorize > tag
body: <p>I'm using Spring Security for the first time with Spring MVC and Tiles.
  Everything is Ok about authentication using users/roles from database, but when I add the <code>&lt;security:authorize&gt;</code> tag to make adaptation according to the user authenticated in the views I'm getting this error : </p>
  
  <pre><code>java.lang.ClassNotFoundException: org.springframework.security.access.expression.SecurityExpressionHandler
      org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1714)
      org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1559)
      java.lang.Class.getDeclaredMethods0(Native Method)
      java.lang.Class.privateGetDeclaredMethods(Unknown Source)
      java.lang.Class.getDeclaredMethods(Unknown Source)
      org.apache.catalina.util.Introspection.getDeclaredMethods(Introspection.java:127)
      org.apache.jasper.runtime.TagHandlerPool.get(TagHandlerPool.java:121)
      org.apache.jsp.WEB_002dINF.pages.jsp.indexAdmin2_jsp._jspx_meth_security_005fauthorize_005f0(indexAdmin2_jsp.java:262)
      org.apache.jsp.WEB_002dINF.pages.jsp.indexAdmin2_jsp._jspService(indexAdmin2_jsp.java:223)
      org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
      javax.servlet.http.HttpServlet.service(HttpServlet.java:728)
      org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:432)
      org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:390)
      org.apache.jasper.servlet.JspServlet.service(JspServlet.java:334)
      javax.servlet.http.HttpServlet.service(HttpServlet.java:728)
      org.springframework.web.servlet.view.InternalResourceView.renderMergedOutputModel(InternalResourceView.java:238)
      org.springframework.web.servlet.view.AbstractView.render(AbstractView.java:250)
      org.springframework.web.servlet.DispatcherServlet.render(DispatcherServlet.java:1047)
      org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:817)
      org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:719)
      org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:669)
      org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:574)
      javax.servlet.http.HttpServlet.service(HttpServlet.java:621)
      javax.servlet.http.HttpServlet.service(HttpServlet.java:728)
      org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:343)
      org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:109)
      org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:83)
      org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:355)
      org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:97)
      org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:355)
      org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:100)
      org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:355)
      org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:78)
      org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:355)
      org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:54)
      org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:355)
      org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:35)
      org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:355)
      org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilter(BasicAuthenticationFilter.java:177)
      org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:355)
      org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:188)
      org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:355)
      org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:105)
      org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:355)
      org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:79)
      org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:355)
      org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:149)
      org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:237)
      org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:167)
  </code></pre>
  
  <p>This is an example of a Tile causing this trouble :</p>
  
  <pre><code>&lt;%@taglib prefix="security" uri="http://www.springframework.org/security/tags" %&gt;
  &lt;div class="leftpanel"&gt;
          &lt;div class="leftmenu"&gt;        
              &lt;ul class="nav nav-tabs nav-stacked"&gt;
                   &lt;li class="nav-header"&gt;iERP&lt;/li&gt;
                   &lt;security:authorize ifAnyGranted="ROLE_ADMIN" &gt;
                   &lt;li class="dropdown active"&gt;&lt;a href="#"&gt;&lt;span class="iconfa-th-list"&gt;&lt;/span&gt;AAA&lt;/a&gt;
                      &lt;ul&gt;
                           &lt;li&gt;&lt;a href="GestionServices.erp"&gt;Gestion des Services&lt;/a&gt;&lt;/li&gt;
                      &lt;/ul&gt;
                  &lt;/li&gt;
                  &lt;/security:authorize&gt;
                  &lt;security:authorize ifAnyGranted="ROLE_USER" &gt;
                  &lt;li class="dropdown active"&gt;&lt;a href="#"&gt;&lt;span class="iconfa-list-alt"&gt;&lt;/span&gt;Section de Facturation&lt;/a&gt;
                      &lt;ul&gt;
                           &lt;li&gt;&lt;a href="FacturesParMois.erp"&gt;Facturation Par Périodes&lt;/a&gt;&lt;/li&gt;
                      &lt;/ul&gt;
                  &lt;/li&gt;
                  &lt;/security:authorize&gt;
              &lt;/ul&gt;
         &lt;/div&gt;
  &lt;/div&gt;
  </code></pre>