Upgrade to tomcat 7.0.40.
Fix CVE-2013-2071