Pin net-ssh 2.7.x

Not sure why, but somthing in the update to 2.8 caused Capistrano to
stop asking for a password.  I doubt I'll be able to chase this one
down.

Luckily, we use keys for all of our non-OIT deployments