Revert "update Plug dep (and use relaxed ver req)"

Don't. Another deps issue.

This reverts commit 819b97c520fad14044a5a7d84d17be7c1cedb58d.