JDK 11 is now required for the Broadleaf 1.7.0-GA release train, and beyond.
Introduced ability to configure the guest token TTL with a property
broadleaf.cartoperation.service.checkout.guest-token.token-timeout
Description: How long the guest token remains valid
Default value: 1 hour
