Improved: upgraded Apache Tomcat from 8.0.36 to 8.0.37 and Log4j from 2.3 to 2.6.2. Added a few comments to document the purpose of the various Log4j dependencies.