make sure we lock deface at version 0.9.1
Use more strict dependencies

Using ">= 1.0.0" is likely to give us trouble any time a dependency
releases a major version
Add process method to BogusSimple gateway to be able to process payments.

Fixes issue where hitting "process" on payments screen breaks with
BogusSimple gateway.

Fixes #3824