default to stop-on-first-failure

You can specify --force to get the old behaviour back.

[Fixes #3]