another shot at using tomcat7 plugin for integration testing
upgrade opensaml to avoid xml-apis dependency, exclude any bouncy castle from being scanned by tomcat