Lock down Hashie version.

The new version of Hashie (3.0) changes dependencies, and is currently in development. We should ensure we're using a version before 3.0 until the issues are resolved in a better way.