Upgrade CXF 2.7.12 to 2.7.13, mainly because of CVE-2014-3623