Third-Party Update: Tomcat

Tomcat has been updated to version 9.0.37 to avoid security issues of the previous version (CVE-2020-13934, CVE-2020-13935).

(CMS-17901)

Add substitution model attribute for FTL Spring bind

Substitution model attributes can now also be used with the <@spring.bind /> macro in Freemarker templates.

(CMS-12747)