In spring security 3.1.x the use of filters=”none” is deprecated. Instead you use multiple <http> tags like this:
<http pattern="/nonsecure/**" security="none"/>
http://static.springsource.org/spring-security/site/docs/3.1.x/reference/springsecurity-single.html#ns-form-and-basic