Update to Tomcat 8.0.3 to fix a CVE; update to SLF4J 1.7.6 for fun and minor bug fixes