Puts a cap on httpcomponents version to avoid bogus 4.3-alpha1