upgrade to maven 3.2.3 to get jars via HTTPS