toml v0.3.0 was released in March 2017 and is missing few fixes made in toml package after the fact. So use the master branch instead. This fixes a regression when switch was made from govendor vendor.json dep management to Go dep. Fixes #3998
Dep insists on adding a dependency for it, so we might as well lock it to the correct version. Fixes #3997
See #3988