security fix upgrade to json 1.7.7