Remove upper bounds on versions of cereal and crypto-api

The upper bounds for cereal and crypto-api do exclude the most recent versions of these packages. After removing the bounds the package still builds and works for me. I haven't done any specific tests. I guess that serialization with the new version of cereal is backward compatible but I haven't checked.