Bump vcap_common to 4.0.1

This version of vcap_common locks down the cookiejar dependency to 0.3.0.
The em-http-request dependency of vcap_common requires this version to
function correctly.

[#65300526]