Add support for rebar deps that don't specify hash

Here's an example of such a dependency in the wild: (rebar indeed supports it)
https://github.com/processone/cache_tab/blob/master/rebar.config#L3