Fix POMs - declare all used dependencies

It's a good practice to declare *all used* dependencies, even those which are
pushed there by other dependency.
Exclude commons-logging from dependencies tree

Sice we're using slf4j, it should be used jcl-over-slf4j instead so
logging messages from commons-logging will go through slf4j.
Declare common dependencies in parent POM (DRY)