remove logback 1.1.2 security issue