flatten logs directories; relocate log4j.xml back to filtered
remove commons-logging from dep tree
fix permissions on assemblies
make sure slf4j stuff doesn't make it into the jetty classloader