change rebar deps to use tagged versions

I had an issue with cowlib not starting, and it turned out to be a master issue with cowboy. Let's specify versions.