lock nokogiri to 1.8.7 compatible version