exclude log4j from transitive dependencies