confirm upgrades ok on second workspace & organisation for dual format POST services

- jackson when upgraded to v2 doesn’t build
- RequestBody annotation too strict so use manual jackson
- validation/assertion & http params parsing should be done in req objs