Update Cowboy and Hackney dependencies

Lock Hackney to a released tag, since a lot of Elixir libraries are
beginning to use hackney too (e.g. HTTPoison).