Update esapi dependency for sec vulnerability