upgrade http-client to 4.3.3

I have tested this both in isolation as well as with the other dependency upgrades combined (commons-io, clojure, kryo, etc.).