[SPARK-11652][CORE] Remote code execution with InvokerTransformer

Fix commons-collection group ID to commons-collections for version 3.x

Patches earlier PR at apache#9731

Author: Sean Owen <sowen@cloudera.com>

Closes apache#10198 from srowen/SPARK-11652.2.

pom.xml

@@ -478,7 +478,7 @@
         <version>${commons.math3.version}</version>
       </dependency>
       <dependency>
-        <groupId>org.apache.commons</groupId>
+        <groupId>commons-collections</groupId>
         <artifactId>commons-collections</artifactId>
         <version>${commons.collections.version}</version>
       </dependency>