Upgraded to XStream 1.4+; reworked XStream construction

Also introducing a "mapper" bean property and applying the stream driver and the class loader to the native XStream delegate now.

Issue: SPR-10421