ISPN-4080 Upgrade to XStream 1.4.7 to fix a deserialization vulnerability

https://issues.jboss.org/browse/ISPN-4080