restrict opium to cohttp<0.12.0

see rgrinberg/opium#14
restrict vhd-tool to cohttp<0.12.0
restrict xen-api-client to older cohttp only