upgrade json_pure-1.7.7: security fix