Allow poison 3.0

[dmathieu]

Poison 3.0.0's notable changes are:

• A different license.
• Enforcing of key validation (each key should be unique).

Diff: https://github.com/devinus/poison/compare/2.2.0...3.0.0

Those changes shouldn't impact the plug graphql library.