lock Thor to version that was known to work

Avoids erikhuda/thor#234, closes #31