Use HibernateJpaVendorAdapter
Set X-Frame-Options to SAMEDOMAIN. 

The default DENY does not work with extdirect responses for a upload
Remove unnecessary commas
Update libraries, plugins and url to spring repository