Lock activerecord dependency on version 3.x