Expand Haml dependency to 4.x

closes #263 

As far as I can tell, Haml 4 doesn't break anything with Brakeman.