Upgrade jackson to 1.9.12
Disable more Jackson auto-detection

Don't auto-detect constructors or use getters as setters
Upgrade to Jackson 2.1.3