Http client upgrade to fix CVE-2014-3577

OWASP A9 fix know vulnerabilities: [CVE-2014-3577](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3577): org.apache.http.conn.ssl.AbstractVerifier in Apache
HttpComponents HttpClient before 4.3.5.
org.apache.httpcomponents upgrade: 4.1.2 -> 4.3.6

Minor pom rework on dependencies check and component version externalization
Maven plugin version upgrade: 1.2 -> 2.1