use cowboy 0.9.0

freeze some other deps also