Upgrade to roundcube 1.6.5 (fix XSS)