update vendor libraries

- update to mustache/mustache 2.6.0 (was 2.5.1 before)
- update to willdurand/negotiation 1.3.2 (was 1.3.1 before)