downgrade commons-logging due to log4j issues

pom.xml

@@ -171,10 +171,13 @@
                 <artifactId>commons-collections4</artifactId>
                 <version>4.4</version>
             </dependency>
+
+            <!-- upgrading this causes problems with log4j-api; e.g. when trying
+               to open the habitat wizard. verify everything before upgrading! -->
             <dependency>
                 <groupId>commons-logging</groupId>
                 <artifactId>commons-logging</artifactId>
-                <version>1.3.0</version>
+                <version>1.2</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.servicemix.bundles</groupId>