xapi-squeezed: add a constraint to the cohttp dependency

Signed-off-by: David Scott <dave.scott@citrix.com>