hard to maka the expectedPost validate since it's built from a set in RpcHelper.invokeGitkitApi at JSONObject.toString() so I added the two possibilities to the mock to make the test pass
Moved the GPG dependencies to a profile. It requires the the GPG application to be included in the path and its only required when compiling a release.
Error message: 'gpg.exe' is not recognized as an internal or external command
Hopefully the gitkitclient is used from a servlet container then gitkitclient and the fellow project jsontoken don't need to add one more to the users project that gone add strange classpath errors down the road just state that its must be provided.
No need to include tomcat to get the servlet api.
junit and mokito must be in the test scope otherwise it will end up in the users runtime lib directory.