Explicitely setting version for commons codec

I think this fixes the jira issue I filed: https://issues.jenkins-ci.org/browse/JENKINS-20418

(at least temporarily)

It may be worthwhile in the future to use maven-shade-plugin to mangle packages of included dependencies so they don't collide with other libraries. (I'm not 100% sure how this stuff works internally)