Don't embed commons codec and commons osgi

Currently auth.core embeds commons coded and Slings commons osgi which creates unnecessary copies of those classes and makes it more difficult to update them (an update of auth core is required each time)