relax dependency, 2.3 instead of 2.3.1

closes gh-7

Thanks to Leon Du (@leondu)