downgraded spring dependency to 2.5.6; added CredUtil to cadc-cdp to support typical server-side usage