Update MVC reference after recent security upgrade.