do not depend on commons-io for UTF BOM removal