browser: stick on phantomjs 1.9.7 due to security bug

https://github.com/ariya/phantomjs/pull/12720

Note: **npm package** phantomjs 1.9.11 is last to use phantomjs
binary 1.9.7.