main/roundcubemail: security upgrade to 1.0.4

* Security: Fix possible CSRF attacks to some address book operations
as well as to the ACL and Managesieve plugins.
* Fix attachments encoded in TNEF containers (from Outlook)
* Fix compatibility with PHP 5.2

(cherry picked from commit 63a91b306681a06e40bdf440fef6402f67238a25)