Update spring and hibernate Brianbolt/issue300

[brianbolt]

Description

• Upgraded dependencies
  • Spring 5.3.19
  • Hibernate
  • Spring Security
• Implemented custom http firewall to allow // urls through as many ACAS routes have them
  • We should remove this via Remove custom firewall that allows // #301 and add additional acas/rservices tickets
• Implemented custom hibernate.physical_naming_strategy
  • Our old setting which mapped Entities via camel casing no longer works in hibernate 5

Related Issue

Fixes #300

How Has This Been Tested?

• Logged in via the UI
• Registered a compound
• Loaded a file
• Ran ACAS client tests pass

[brianbolt]

I left a bunch of comments. I'd read over them first. There are lots of files changes but the types of changes are empirically low.

Note also the changes to applicationSecurity-context.xml need to be propagated to deployments which customize this file.

[brianbolt]

@philippcheung @jmcneil86043 Just a heads up that this is coming down the pike. It's a pretty big change to the base persistence layer of ACAS so wanted to give you a heads up. Still a draft but one thing that I know is broken is the ROO UI. Use of the ROO UI has been waining for years in favor of making proper node admin modules so we aren't inclined to spend a bunch of effort to fix it but if its easy, then we will.