pin the thumbor libs, 4.7.0 breaks on travis