Put thymeleaf version in dependency management