restrict opam to cohttp<0.12.0

see rgrinberg/opium#14