remove commons-logging from dep tree
fix permissions on assemblies
make sure slf4j stuff doesn't make it into the jetty classloader