swap out sun StringUtil
bump httpclient dep to latest version