[refactor] moved http dependency of http users out of the security core. Means you do not need javaxs.servlet dependency when embedding eXist