Exclude commons-codec.

... to pick up the version from the core that's newer, or else tests
will fail.