switch deps to use fcrepo4-bom

Related to: https://github.com/fcrepo4/fcrepo4/pull/365

Ticket: https://www.pivotaltracker.com/story/show/63571456