bump spree restriction to 2.0.4