up versions: tomcat version, spring-security, -data
cglib removed
upped cxf