update httpclient due to cve

[pjfanning]

Fixes #12421.

Description

CVE in httpclient - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13956

Fixed the bug ...

Renamed the class ...

Added a forbidden-apis entry ...

---

Key changed/added classes in this PR

• MyFoo
• OurBar
• TheirBaz

---

This PR has:

• been self-reviewed.
  • using the concurrency checklist (Remove this item if the PR doesn't have any relation to concurrency.)
• added documentation for new or modified features or behaviors.
• added Javadocs for most classes and all non-trivial methods. Linked related entities via Javadoc links.
• added or updated version, license, or notice information in licenses.yaml
• added comments explaining the "why" and the intent of the code wherever would not be obvious for an unfamiliar reader.
• added unit tests or modified existing tests to cover new code paths, ensuring the threshold for code coverage is met.
• added integration tests.
• been tested in a test Druid cluster.

[pjfanning]

Build failed with memory issues in one test - org.apache.druid.query.groupby.epinephelinae.BufferHashGrouperTest

[kfaraz]

@pjfanning , thank you for the changes. Please include the CVE link/details in the PR description.

[pjfanning]

@kfaraz added link to https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13956 in the PR description