Use Spring Framework bom and fully exclude commons-logging

Closes #955
Closes #978