tomcat 7.0.35

Closes #17272.

Signed-off-by: Jack Nagel <jacknagel@gmail.com>
CurlApacheMirrorDownloadStrategy: fetch mirrors in JSON format

Closes #16457.