Two versions of xmlrpc-client are pulled in the dependency tree

This is because the groupId was changed between 3.0 and 3.1, and since we're pulling 3.1 in xwiki-core-xmlrpc, but don't exclude the 3.0 one (which is perceived as a completely different project instead of a different version of the same project), both jars end up in the classpath.