Closes #384. Also updates the updater to use stream loading only and to query the jar using Java's JarFile class to get entries instead of the File API. This ensures that it will work without filesystem resources.
Closes #536 by shutting down the Quartz Scheduler using a @PreDestroy annotated method.
closes #556 by adding query param to image src url
removing random int from js script url to make testing js easier
closes #241 by adding HttpOnly cookie to true in web.xml
closes #242 by adding 'X-Content-Type-Options:nosniff' header to ClickJackFilter in order to reduce MIME type security risks
Closes #460 by removing extra elements from inside the table. IE table validation is stricter than FF / Chrome.
Merge pull request #565 from denimgroup/bugfix-tfgh242-add-X-content-Type-Option-header

closes #242 by adding 'X-Content-Type-Options:nosniff' header to ClickJa...
Merge pull request #566 from denimgroup/bugfix-tfgh556-jasper-report-vulns-image-refresh

closes #556 by adding query param to image src url
Merge pull request #567 from denimgroup/bugfix-tfgh241-add-httponly-cookie

closes #241 by adding HttpOnly cookie to true in web.xml
Closes #564 by updating paths in the controller and JSP.
Closes #563 by removing 'word-wrap: break-word;' from <td> with the API key in it.
Closes #562 by checking for existing WAFs first
removing duplicate addition of httponly cookie
Merge branch '2.1final' of github.com:denimgroup/threadfix into 2.1final
closes #552 by setting loadAll method in WafService to retrieveAllActive Wafs
Merge pull request #568 from denimgroup/bugfix-tfgh552-cannot-delete-WAF

closes #552 by setting loadAll method in WafService to retrieveAllActive...
Updates @ScanImporter annotations to handle more metadata including scan type determination.
Merge remote-tracking branch 'upstream/2.1final' into 2.1final