removing log4j as a transitive dependency