adjust some dep version bounds

Relax bytestring to 0.10.*.  Constrain snap-extras to >= 0.9 (cabal
was trying to install a very old version).