Both cas-server-webapp and cas-server-integration-restlet depend on cglib; the former via transitive dependency on spring-json and the latter directly. Placing the dependency directly in the webapp artifact and removing it from the other locations cleans up the dependency graph when both webapp and restlet are used together. It's safe to remove the dependency from restlet since there is no use case for using it without webapp.