consider updating unicorn to 4.9.0

debian already has 4.9.0 and diaspora already uses it. I requested SemVer compliance from them so we could loosen depends to ~> 4.8