WL-3006 Have correct dependency on commons-io

I've left in the first commit even though it gets reverted as it's an alternative solution when you need a shaded JAR in a webapp and we may need to switch to this approach.