functions. Cleaned up user class to prevent marshalling of passwords,
but handle incoming password values properly. Separated create and
update methods. Made error reporting more robust.

XNAT-4301 XNAT-4394 XNAT-4500 Added @XnatMixIn class mapping processing to RootConfig. Cleaned up User class to ignore properties we don't want to see. Adjusted ResultSet processing to fix investigator API error.

file format that became unsupported as of Java 8. Replaced with last
open release of primary Saxon 9.1.0.8 library (newer Saxon-HE library
changed API so that PipelineManager didn't compile, and other XPath
implementations would also require migrating that same code).

XNAT-4377 XNAT-4382 Cleaned up some dependency issues that affected build of XNAT data builder plugin. Added XnatPluginApi REST API. Added SortedProperties utility class to make it a bit easier to read properties outputs.

XNAT-2429 Workaround for weird error where XnatRestletExtensions beans aren't being loaded by ApplicationContext.getBeansOfType().

application context, moving it back into root. Updated
gradle-git-version plugin.

XNAT-4327 Removed additional code that set CSRF token. All token sets should now be done only in session event publisher at the point when the session is actually created.

Minor refactoring of persistent and automation events. Better event listener exception handling and reporting. EventClass annotation is now an NRG processed annotation. Fix null Python scripting engine issue

XNAT-4346 XNAT-4330 Changed AbstractXnatRestApi to AbstractXapiRestController. Fixed logic in permissions check that broke certain saved searches.

XNAT-482 Fix to build issue found when updating plexiviewer dependency. This exposed circular dependency where xnat-web war was included in xnat-web war, with predictably terrible results.

XNAT-4232 Tangentially related, providing more logging info on XAPI execution, logging arc-spec initialization.

Fixed issue with build versioning, removed git-versioning plugin and substituted simple git plugin for revision.

Removed old version REST API, added new buildInfo call in siteConfig, added build plugin to retrieve git repo info and build number.

Added Hibernate 4 module to JSON serializer/deserializer to remove proxy properties in serialized JSON.

Added fail-safe defaults to DatabaseConfig. Removed SpawnerConfig but added reference to spawner library SpawnerConfig to WebConfig. Added /xapi path to Swagger configuration. Added mavenLocal() to publishing repositories in build file.

serializer service rather than separate object mapper instances.
Integrated spawner functions. Moved from using resource resolver
directly to using XnatResourceLocator.

deployToTomcat task. Added some common ignore templates.

Made data source and Hibernate configurations populate from services.properties. Moved ORM configuration into DatabaseConfig and removed XML configuration file.

Moved SwaggerConfig operations into WebConfig and fixed paths on Swagger resource handlers. Moved UsersApi and related classes into users subpackage. Fixed timeout cookie. Moved InstanceSettings.xml to InstanceSettings.xml.sample and put InstanceSettings.xml into the .gitignore file. Updated some dependency versions.

Downgraded Jackson version to 2.6.5 to address compatibility issue with Spring 4.2.4.RELEASE (Jackson 2.7 is not supported until Spring 4.3).

Added session timeout back to web.xml, removed from session event publisher. Added back in missing Spring Security filter chain from move to initializer. Added missing Xalan dependency for security. Added @PreDestroy method for DICOM SCP manager.