lock spree version to ~> 2.0.0