Mark javax.servlet.servlet-api as provided

(thus force the runtime to provide it)

closes #7