Patch Untrusted Java Deserialization

[ndegwamartin]

This issue tracks the issue https://github.com/opensrp/opensrp-server-core/security/code-scanning/245

This fix might need to await a patch from Spring given there's LTS support for Spring 5.3 till late in 2024 https://endoflife.date/spring-framework.

[ndegwamartin]

Supporting documentation on the CVE

• https://github.com/CxDemoInABoxRepos/Java-Webgoat/issues/206
• https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-579669626
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1000027