remove apache commons exclusions from POM

corresponds to commit 0c3c9d290e98752278ca544d1cdeb4f919d77728 on master
Merge remote-tracking branch 'upstream/merge_modules' into merge_modules