Bump http to remove xss issues.

Change-Id: I7c3e7a3f5aba311b06adacc9b86a95499d74ec15