Switch to the same log4j version used by GT2/GWC/GS

[aaime]

@etj this is an update of the log4j dependency. I've verified the right jar ends up in the webapp war file.

[mprins]

superseded by https://github.com/geoserver/geofence/pull/252