restrict thin dependency to < 1.6

1.6 requires eventmachine 1.x, which fails to resolve

As we decided here https://github.com/derekcollison/nats/pull/59 instead of bumping eventmachine lock down thin.