#23 - removed transitive deps on commons-logging, added enforcer plugin to ensure it doesn't come back