add OWASP ZAP to dependencies