loosen http-assert dep
1.0.3