settling on Ciconia 1.0.3

URL bugs should not affect anyone but Schlaefer, so it's not worth to
hassle with dev dependency; update if available #258