Common http has picked up a runtime log4j dependency.