lock gson to 2.3