use dotenv 0.11.x

this is a less loose version of #436 - 0.11.x allows the use of `dotenv-deployment` which is a significant improvement over 0.7.x