Alphabetize plugins
Add findbugs-maven-plugin

Address one bug and ignore XSS bugs.