LIVY-1014 update versions for OSS and newer java preparedness

[edwardcapriolo]

What changes were proposed in this pull request?

(Please fill in changes proposed in this fix)
LIVY-1014

How was this patch tested?

Running built in tests

Please review https://livy.incubator.apache.org/community/ before opening a pull request.

[edwardcapriolo]

These versions greatly number the list of vulnerabilities a code-scan like "owasp" will find.

    <commons-codec.version>1.18.0</commons-codec.version>
    <httpclient.version>4.5.14</httpclient.version>
    <httpcore.version>4.4.16</httpcore.version>

[edwardcapriolo]

@gyogal This one should be a more simple review