bump up versions of apache commons codec and lang