making POI an optional dependency

POI is optional because it's only used for MS Excel support.

It seems minor, but org.apache.poi:poi pulls in log4j and other not nice deps