add missing Setup.hs
add upper bounds to dependencies