Downgrade depdendency due to CVE alert

[Avery-Dunn]

Resolves https://github.com/AzureAD/microsoft-authentication-library-for-java/security/dependabot/42

A newer version of the affected dependency hasn't been released, so this PR downgrades it to the newest version that the CVE doesn't affect

[dfa1]

the downgrade is causing a dependency convergence issue with maven-enforcer-plugin:

07:43:38,806 [ERROR] Dependency convergence error for net.minidev:json-smart:jar:2.5.1 paths to dependency are:
07:43:38,806 [ERROR] +-myproject:api:jar:0.0.0-SNAPSHOT
07:43:38,806 [ERROR]   +-com.microsoft.azure:msal4j:jar:1.19.0:compile
07:43:38,806 [ERROR]     +-com.nimbusds:oauth2-oidc-sdk:jar:11.18:compile
07:43:38,806 [ERROR]       +-net.minidev:json-smart:jar:2.5.1:compile
07:43:38,806 [ERROR] and
07:43:38,806 [ERROR] +-myproject:api:jar:0.0.0-SNAPSHOT
07:43:38,806 [ERROR]   +-com.microsoft.azure:msal4j:jar:1.19.0:compile
07:43:38,806 [ERROR]     +-net.minidev:json-smart:jar:2.4.11:compile