fix(deps): use Connect 2.x.x

Connect 3.x removed session cookies from core, causing tests to fail for anyone with Connect 3.x installed. This change forces it back to the last good state.