Loofah dependency fix

With Loofah 2.0, crazy harry fails with `uninitialized constant Loofah::Helpers`. Fix by locking the dependency to `~> 1` for now.