much cleaner dependency management wrt spring versions (started using the BOM)