adding findbugs annotation jar to report false positives
. fixing some sonar issues