Depend on explicit version of tomcat

As it will break on 2.3 otherwise.