upgrade to commons-fileupload 1.3.1 (http://struts.apache.org/announce.html#a20140221)