update commons-io to 2.4