lock haml to 4.0.2