Depend on lens-4.0.*, drop lens-aeson dependency.

Additionally, I've added a `changelog` file mentioning the change. Hackage automatically links files from the package description page when they are named `changelog` (see this page for example http://hackage.haskell.org/package/pipes-binary)