Update roundcube to 1.5.2 to fixe an XSS