bump candlepin-deps version which included javamail