logback dependencies should be optional

This patch makes the actual logback dependencies optional, so that ppl can choose whatever version they want without having to first exclude these dependencies. This will also keep https://maven.apache.org/enforcer/enforcer-rules/dependencyConvergence.html happy, a must-have rule on any good sized project.