Acceptance Criteria:

Update Hibernate, Spring.
Update other libraries as necessary.
Test Gateway: openid, login, search, download, hidden links (OAI, dataset API, redirects of API changes), whois, ip geocode services, SAML requests, XML libraries and services.

Note: We can't update Solr.
Note: We also need to test recent API changes and redirects, such as OAI, Atom, etc.
Note: We may be able to replace GlassFish/JavaX.json, and other libraries with JACKSON.