Bump to Toucan 1.1.9

This upgrade removes some unecessary classpath scanning from
Toucan. This slowness only affected the first query, which would
typically show up as a really slow call to the `/api/user/current`
endpoint (sometimes 10+ seconds).