Upgrading Jetty: No need to disable cookies as a session tracking mechanism, as we don't use session tracking at all. (ServletContextHandler no-arg constructor sets this)
Upgrading Jetty: Remove unused field.
slf4j-jdk14 should be test scope; don't want to tie ourselves to a specific adapter (the application that uses JXSE makes that choice)