Loosen thor dependency to ~> 0.18

Reduce the risk of dependendy conflicts with other libraries that pull in thor.