Require http-conduit < 1.9.0

Turns out quite a few source-incompatible changes were done to
http-conduit 1.9.0, which broke the build. So let's introduce this
requirement for now.