Review security analysis plugin results for branch

Story
As the security officer for Alfresco I want to have our REST API code checked via static analysis so that I know we don't have any commonly made security mistakes.

Acceptance Criteria

• If required, have the security static analysis Sonar utility enabled on the develop branches of all builds, including upstream builds
• For any issues marked as serious or above, a bug has been raised

Guidance:

• Raise a story to cover blocker issues
• Investigate critical issues and, using common sense, mark as false positives, won't fix or resolve.