update legacy commons-lang2 from 2.4 to 2.6