update httparty to deal with CVE-2013-0156