Thank you all again! Here's the line that we added to /etc/sudoers, and it worked like a charm:

www-data ALL = NOPASSWD: /bin/umount,/sbin/umount.cifs,/usr/bin/smbumount