lockdown pre 1.0 deps to the exact version
allow post 1.0 deps to be locked down to compatible versions ^
Merge pull request #499 from stefanpenner/lock-down-deps

lockdown pre 1.0 deps to the exact version