Merge pull request #488 from sullis/disallow-java-lang-Thread

add 'java.lang.Thread' to struts.excludedClasses