Upgrade CXF 3.0.1 to 3.0.2, mainly because of CVE-2014-3623