pin to faraday 0.8.9

0.9.0 changes something, but not clear what, that cause the auth request to fail 401

testing shows the same token is generated, something lower level is breaking
version bump