Bump the version of httpclient to 4.3.6

HttpClient versions prior to 4.3.6 are susceptible to a MITM attack during hostname
verification.

http://mail-archives.apache.org/mod_mbox/www-announce/201408.mbox/CVE-2014-3577