Fix lower bound on yesod-auth