Relax http-types dependency

A lot of other package have removed the upper bound on http-types; this does the same here.