bump lens and wreq, but wreq is from git for now

Signed-off-by: Ricky Elrod <ricky@elrod.me>