servlet-api should be scoped as provided dependency

[davidmoten]

servlet-api is stub for compilation purposes only and should not be deployed along with a webapp because the target container is expected to have an implementation of the servlet-api.