lock sinatra to version 1.3.5