Update commons-codec dependency to 1.6

It is already pulled in transitively by httpclient:4.2.1. This change simply makes it explicit.