add dependencies for validator error

Someone should double check licenses are okay...
latest 2.2.x version is 2.2.6, any reason to use 2.2.4? There is also a 3.0.0 under the `org.glassfish` groupId