Lock cookiejar at 0.3.0

Per this issue: https://github.com/dwaite/cookiejar/issues/13#issuecomment-37520773

This probably should be considered urgent.