Complete UI move on Tomcat (moves to /ui URL).
Missing empty update report resource in built JAR.
Improves XML Schema validation (prevent node clone and re-parse).
Continues remove of getActiveSubject() (replaced by Spring Security calls).
Removes session expiration code handling in base REST callbacks.