SPARK-3638 | Forced a compatible version of http client in kinesis-asl profile

This patch forces use of commons http client 4.2 in Kinesis-asl profile so that the AWS SDK does not run into dependency conflicts
Do you mind using version 4.2.6 instead of 4.2?  According to http://ispras.linuxbase.org/index.php/Java_API_Compliance_Checker, there are no binary incompatibilities between 4.2 and 4.2.6, so we should prefer to use the newer version.