Clean up dependencies

To have fewer real dependencies, changed the scope for some:

* all servlet related dependencies are `provided`
* all test dependencies are `test`
* all concrete logging dependencies are `test` as well