Transition to JPA for persistence
Depend on Log4j 2 instead of 1.2

 * And send verbose output to file instead of console
URL-based security in thymeleaf templates
AJAX + proxy indications from TrialVerse