Upgrade to commons-logging-1.1.1

Upgrading to commons-logging 1.1.1, since tomcat logs some warnings about the included servlet-api dependency, which was wrongly included by the commons-logging-1.1 pom.

Also has some other minor improvements in a java-security enabled container.