Loosen spree_core and spree_auth_devise dependencies