Add commons-logging dependency to password-hasher